Revert specific changes made by a user in Panorama via ansible

Hi Team,
I am looking for an ansible solution to revert only specific uncommitted changes made by user in Panorama. For eg: if a user created an security policy and a nat rule, I want to revert that specific nat rule creation not the security policy.

PAN-OS Xpath

Hi all,

Is it possible to retrieve info for security profiles and policies using XPath on Panorama-managed firewalls?

As of now, I am able to retrieve this info via panorama xml api/xpath, but not through the firewall directly. 
The security policies

Suspicious VPN log in attempts - do you guys also get this?

We don't have users in Switzerland / Netherlands, but I can see consistent log in attempts from the GlobalProtect logs.

I know the true locations is masked, but this is a persistent thing, wondering if you guys also get this?

I've geo-blocked sus

incorrect determination of the geo-sign of the IP network by Palo Alto networks 31.135.232.0/22

Good afternoon. We encountered a problem. We are the owners of the network 31.135.232.0/22. In the system "Palo Alto networks" it is determined by geo-identification as Ukrainian, although in fact it belongs to a Russian Internet provider. Accordingl

Importing Shared Object Questions

I have a relatively new Panorama installation.  I want to associate 2 in production firewalls with ~1700 shared objects each.  These two are only slightly different, I could make them the exact same with a little leg work.

I associated and disassoc

Commit and Push to Devices - via API call to Panorama

Hi all,

I am trying to develop a proof-of-concept script, where our SOC will push an a shared address object to Panorama, with a tag "SOC_IDENT_HIGHRISK". These objects will then be dynamically added to a security group to which block rules are app

Server error : No ECDSA host key is known for netadmin2.intra.chu-rennes.fr . Host key verification failed.

Hello team,

I have a problem with my export configuration Panorama via  scheduled task.

When I make a test SCP server connexion I have this mesage : 

Before upgrade to 10.2 the export was working fine.

I have also saw that PAN-188052 talk abou

Panorama commit stuck at 50% for so long then fails (2)

Hi Team,

I would like to seek for some advise. 

Panorama is not successful in committing in one of the managed firewalls. I already checked the "Share Unused Address and Service Objects with Devices" and set the timeout to 240 but issue is still

Panorama migration from M-100 to M-200

Dear Community,

on weekend, I was migrating M-100 to M-200 and though it might be beneficial to share how it went.

Migration scenario:

2x M-100 in HA in Panorama Mode + 2 log collector groups (1 group for M-500 log collectors and 1 group fop M-60