About mrzepa2

I'm trying to use the REST API to get/set variables on the template stack. According to the restapi-doc for PANOS 10.1, under the "devices" object, there is an "entry" object which has an Array of objects that contain 2 more objects, the first being "@name" which is the serial number and the second being "variable" which is an object that contains an "entry" and an Array of objects repressing the variable (name, type and value). When I do my get call, all the info is returned except the "variable" object. [{'@name': 'sample_Stack', 'description': 'sample description', 'devices': {'entry': [{'@name': '0128001123456'}]}, 'templates': {'member': ['sample1', 'sample2', 'sample3']}}]   Anyone else try this and gotten it to work?   From the restapi-doc: Array   @name required string   <object-name>   <= 63 characters Alphanumeric string [ 0-9a-zA-Z._-] description string   <= 255 characters Description of template stack devices object Device serial numbers entry Array of   objects   Array   @name required string   <= 64 characters Device serial number variable object   entry Array of   objects   Array   @name required string   <= 63 characters Variables need to begin with '$' type required ... View more

When trying to add a device in expedition 2.0, I get a popup "Something went wrong. Please try again..." and no further explanation as to what the error is. Is there a way to dig deeper into this error so I can find out why I can't added devices? ... View more

Greetings,   I’ve run into a challenge with using the REST API to get the security policy from device groups in Panorama. I’m hoping you may know someone who can answer this.   If I use the XML API and get the policy from a particular device group, I get only the rule that belong to that device group, which is what I want. If I use the equivalent REST API to get the same policy, I end up getting all rules from all parent device groups, which is not what I want.   Assuming my device group hierarchy looks like the following: Shared -Child1     -Child2   Using XML API to get the PreRule security policy from Child2, I get only rules defined in Child2. Using REST API to get the PreRule security policy from Child2, I get the rules from both Child1 and Child2.   At first, this looks like a bug, but if you think about it, returning the entire policy makes sense because the child2 policy does actually inherit all the rules from child1 and shared. I could live with this if the "location" field was set properly, unfortunately, the location field in the policy from child2 always lists "child2". IMHO this is a bug.   Why use Rest API when XML API does the job? The answer is quite simple, the JSON formatted output returned by the Rest API is so much more humane than the XML API. Not only is JSON way easier to deal with, but if you look at the actual data returned, the Rest API is so much cleaner than the XML API (at least for Policies).   For now, I am using the following workaround. Fetch the security policy for child1, fetch the security policy for child2, diff them, any rule from child2 that does not appear in child1 must belong only to child2. This is an ugly workaround, but still better than dealing with the XML API. ... View more

Greetings,   Using pandevice, I am able to add a tunnel interface, give it and IP, comment, and set the virtual router. using the set_virtual_router() function. However when trying the set_zone() function to set the security zone, I get an error.  <previous code removed> #Create a network interface object named tunnl.[TunnelID] tun = network.TunnelInterface(TunnelID,ip=DATACENTER_TUN_INTF,comment=TUN_COMMENT) #Add the tunnel object to the Template object and create it. Template_obj.add(tun).create() TUN_ZONE='internal' tun.set_virtual_router(DC_VR,refresh=True,update=True,running_config=True) #everything is good up until this point tun.set_zone(TUN_ZONE,refresh=True,update=True,running_config=True)   The error I get when I run the code: Traceback (most recent call last): File "/Users/mrzepa/opt/anaconda3/lib/python3.7/site-packages/pandevice/base.py", line 2447, in _get_param_specific_info p = token.format(**{}) KeyError: 'mode' During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/Users/mrzepa/src/scratch.py", line 313, in <module> main() File "/Users/mrzepa/src/scratch.py", line 280, in main tun.set_zone('zap',refresh=True,update=True,running_config=True) File "/Users/mrzepa/opt/anaconda3/lib/python3.7/site-packages/pandevice/network.py", line 325, in set_zone update, running_config, return_type, False, mode=mode) File "/Users/mrzepa/opt/anaconda3/lib/python3.7/site-packages/pandevice/base.py", line 1522, in _set_reference obj.update(reference_var) File "/Users/mrzepa/opt/anaconda3/lib/python3.7/site-packages/pandevice/base.py", line 621, in update path, value, var_path = self._get_param_specific_info(variable) File "/Users/mrzepa/opt/anaconda3/lib/python3.7/site-packages/pandevice/base.py", line 2455, in _get_param_specific_info raise ValueError(msg.format(param, param_ref)) ValueError: While updating variable interface, missing replacement variable mode in path   Any help would be most appreciated. Thanks. ... View more

Greetings,   I use Template Stacks with variables a lot for firewalls with the same hardware and network settings. To assign the value of a variable, I go to the template stack and export the variable CSV file. I modify the file with the values for my firewall and import the CSV file. This is all good, but I would like to automate this via API. Via the API I can add new variables to my Templates, but this is not what I want to do. I want to add the values to the variables for the NGFW devices assigned to the Template Stack. I just can't figure out how to add values to the devices in my templates. I would even be ok with exporting the variable CSV via API, have my script modify the CSV, (add the values in the appropriate sections), and then import the CSV via API, but once again, I can't find where you can export the variables CSV. I can export all kinds of other items, but not this. I am doing my scripting in python with the pandevice module. Thanks. ... View more