About ksteves

another alternative may be to use 'get' with the xpath below. $ panxapi -t panorama -gxr /config/devices/entry/device-group/entry/devices get: success <devices><entry name="001606000471"/></devices><devices><entry name="0004C101452"><vsys><entry name="vsys2"/></vsys></entry></devices><devices><entry name="0004C101452"><vsys><entry name="vsys3"/></vsys></entry></devices><devices/> ... View more

To delete multiple you can use an XPath with 'or': [text()='foo' or text()='bar'] delete does not use an element argument, only xpath. set is 'merge at XPath node', edit is 'replace at XPath node'. for edit your example will need the member elements in <list></list>. also see this: ... View more

There are a few ways you might do this. You can use the panxapi command line program from the PAN-perl package on DevCenter and get/show (-g/-s) the source device group xpath then set (-S) the XML into the new device group.  Also clone (--clone) might be able to do this in one step. You could also use the load config partial CLI configuration mode command.  The challenging part may be figuring out the xpaths.  However, assuming you want to copy post-rulebase security rule1 from test-dg to dg2, the following should work.  Hopefully that will get you started and you can adjust the xpaths to do what you need to do. admin@Panorama# load config partial from running-config.xml from-xpath /config/devices/entry/device-group/entry[@name='test-dg']/post-rulebase/security/rules/entry[@name='rule1'] to-xpath  /config/devices/entry/device-group/entry[@name='dg2']/post-rulebase/security/rules mode append Config loaded from running-config.xml ... View more

you can use context 'dns-req-section' and \x to start and end hex bytes for length to construct the domain name in the question like the example below, however I'm not aware of how to construct a valid pattern to match case insensitive. the below will match www.hp.com but not www.HP.COM and so on. also, if you could match case insensitive someone could use name/label compression to subvert the pattern match. set application dns-qname-www.hp.com signature www.hp.com and-condition "And Condition 1" or-condition "Or Condition 1" operator pattern-match pattern \x03\xwww\x02\xhp\x03\xcom\x0000010001\x set application dns-qname-www.hp.com signature www.hp.com and-condition "And Condition 1" or-condition "Or Condition 1" operator pattern-match context dns-req-section set application dns-qname-www.hp.com signature www.hp.com scope protocol-data-unit set application dns-qname-www.hp.com signature www.hp.com order-free yes set application dns-qname-www.hp.com signature www.hp.com comment "0001 is type A 0001 is class IN" set application dns-qname-www.hp.com parent-app dns ... View more

That is unexpected behaviour.  The http/https connections are handled by LWP::UserAgent. Attached is a test program that works in my environment.  Try that and report results with error/warning output. ... View more