About f1r3withf1r3

Hi all,   I saw previously someone posted a Perl script that finds unused address objects, but had some limitations.   From my end, I'm looking at trying to report on this via Powershell through the Invoke-RestMethod cmdlet that I've done against other bits of the API.   What in the schema (if any) on an address object determines whether or not it's actually being used?   Any and all insight(s) greatly appreciated 🙂 ... View more

Version: PAN-OS 8   Hi all,   I am attempting to create new security rules in Panorama, but keep getting a response that says a schema node cannot be found   I have the following code in a PS function, where $Name is my intended rule name, and $DeviceAddress is my Panorama address   "Invoke-RestMethod "https://$DeviceAddress/api/?type=config&action=set&key=$apiKey&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='$Name']&element=$script:requestXML" -Method Post"   Could not find schema node for xpath /config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='MY Arbitrary Rule Name']   Can someone clarify what is incorrect about the XPath, please? ... View more

Hi all,   I'm searching through the API browser on my PAN-OS 8 instance, and wondering where the syntax exists for exploring/getting the local policies per-physical device.   Or for clarity's sake - what API endpoint would return all of the local device's security policies. I am using some from Panorama globally, and cleaning up local security policies.   Not asking for someone to write a query for me, just point me to the right place in the API, please.   Any help appreciated!     ... View more

Hi all,   So far I've been able to sort out and match various device group objects according to my needs.   Now I'm trying to find in the API where I can retrieve information on Security and NAT rules so I can view attributes.   My goal is to see what sub-tags are available in the schema for those objects so I can discover via a script I'll write which of my objects are utilizing security rules.   The API browser shows "<show><rule-use><type>used</type></rule-use></show>" as an option, but when attempting to submit it states that rule-base is required. I added that tag into the query, then got a message saying device-group is required.   So, I added that as well along with my intended device group name, but then got the following as output: <response status="success" code="19"> <result> <msg> <line>query job enqueued with jobid 222269</line> </msg> <job>222269</job> </result> </response>     Not really the information I'm after. If anyone knows the appropriate way to view what security rules are applied to device groups (or perhaps what device groups have security rules associated with them), or simply suggest a way to get more information on security or NAT rules, I'd be very grateful.   Cheers ... View more