About mbenoit

Hi,  Yes you should have them flag it as well - you can have them reach out to me for additional details (I'm at corporate) ... View more

There are lots of debug commands that can impact the performance of the device significantly so they limit what is exposed, the correct handling of this is to map it to a corresponding <op> command that makes sense like request user-id refresh (dp-uid-gid | group-mapping | user-id).  I think that is an excellent Feature Request!  I can bring it up to the User-ID Product Manager if you would like. ... View more

Hi, Debug commands are not among the <op> commands that are exposed via the API.  If you search for PAN-Perl there is an expect based CLI tool for remotely executing CLI commands on the firewall that will work. ... View more

Hi David, The error codes are listed here: Unfortunately, what's listed won't help you troubleshoot it yourself: It is simply listed as an Internal Error: Check with technical support when seeing these errors.    Can you post a few more details as to what you are trying to accomplish and a sample url? ... View more

Hey, personal preference is personal preference : ) You can still leverage the PHP scripts and feel free to tweak on the required libs for EXTJS and get it working.  Have you also seen the PAN-Perl libs? Those have an install guide for Ubuntu and you can leverage those as CGI's and front end them with a web server.  It's all dependant on what you want to accomplish. Good Luck! Marc ... View more

I wouldn't recommend it as we won't be able to help you much without burning a bunch of time.  Stick with CentOS and we'll be able to support you much better on this forum. ... View more

Also as a side note I had lots of difficulties getting the php correct php libs and updates installed for Ubuntu in order to work well with the EXTJS package so we ended up utilizing CentOS as a base distri.  The canned repo updates for PHP in Ubuntu will not work as built. ... View more

Hi, That script is intended to install the components on a vanilla CentOS dev test installation as is described in the documentation, not on Ubuntu.  At the beginning of the document you will find: First, download the clean CentOS LAMP stack from CentOS: http://dev.centos.org/~tru/vmware/centos-5-20100321/CentOS-5_lamp.x86_64.zip The content of the script are as follows and would need to be modified by you to fit your Ubuntu environment: #!/bin/bash rm -rf /var/www/html mv var/www/html /var/www/html mysqladmin drop msspan -f mysqladmin create msspan -f mysql msspan < /var/www/html/SQL/msspan.sql rm -rf var cp /var/www/html/os/root.cron /var/spool/cron/root service crond restart Best Regards, Marc ... View more

Hi Brandon, In 4.1 the XML API has been re-organized and has several enhancements.  One of which is that commit is now a 'type' and no longer nested as an 'action' under config.  There are also several additional options for partial and vsys specific commit operations. https://hostname/api/?type=commit&action=set&key=keyvalue&cmd= <commit></commit> This will also work (the original API path has been preserved for backward compatability: https://honstame/esp/restapi.esp?type=commit&action=set&key=keyvalue&cmd= <commit></commit> If you log into your firewall as a super user for an admininstrative web session, then open a new tab in your browser and navigate to: https://hostname/api/ You will be greeted with the new API command browser to assist you in constructing XML API calls. Best Regards, Marc ... View more

weird! A malformed request indicates a general failure of the call and that no data is passed so you shouldnt be displaying any of the policies in Panorama at the conclusion of that call.  The rules are all set in an atomic transaction that is step 12 of the template execution. ... View more

Hi Tony, What version of PAN-Perl do you currently have installed?  the initial mechanism that panxapi was using to interact with the XML API was HTTPS 'GET' which has a limitation to the number of characters that you can push to the FW at a given time.  The latest version posted (PAN-perl-20110828) the default mechanism is now 'POST' which eliminates that as an issue.  It would also be helpful to know what model and software version your are running on Panorama and the FW's that you are attempting to migrate from.  You can also add a debug flag to the script for the panxapi call by modifying this line in the set script:     /usr/local/bin/panxapi -h $hostname -K $api_key -S $elem "$xpath"     /usr/local/bin/panxapi -h $hostname -K $api_key -DS $elem "$xpath" Best Regards, Marc ... View more