-
Notifications
You must be signed in to change notification settings - Fork 16
/
CHANGELOG.txt
executable file
·2467 lines (2009 loc) · 136 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
CHANGELOG
2.1.20
UTIL:
* type=xpath | introduce "actions=set-text:NODETEXT"
* type=rule | new 'filter=(app has.seen.fast-api unknow-tcp)' - to filter for device traffic log if specific app-id was seen
* type=rule actions=exporttoexcel | extend with column 'url-category'
* type=bpa-generator | introduction to support offline XML config file
* type=bpa-generator | improve offline config handling
* type=tsf | in addition to extract XML config, also extract /tmp/cli/techsupport_*.txt
* type=bpa-generator | introduce support to reach techsupport.txt from TSF /tmp/cli/techsupport_*.txt
* type=bpa-generator | introduce support to handle TSF file from 11.1
* type=certificate | introduce actions=exporttoexcel:CERT_file.html | 'filter=(expired < 90days)' | 'filter=(expired < today)'
* type=certificate actions=exporttoexcel:file.html | extend with column subject and issuer
BUGFIX:
* type=gcp actions=download | bugfix to handle command order correctly
* type=rule actions=stats-XYZ-FastAPI | bugfix to read argument correctly
GENERAL:
* GENERAL: Device App-ID update to version: 8763-8333
* class Zone.php | extend validation for new PAN-OS features 'net-inspection' 'prenat-identification'
2.1.19 (20231006)
UTIL:
* different classes | improve usage of flag 'XML_PARSE_BIG_LINES' in method loadXML
* class PANConf / Panoramaconfg | implement method ChildDeviceGroups() for 'location=shared:excludemaindg'
* type=gcp | introduce argument 'namespace=XYZ' to specify and better filter for get pods
* type=device | introduce actions=virtualSystem-delete/sharedgateway-delete/sharedgateway-migrate-to-vsys
* type=static-route | introduction of new type= | with 'filter=(nexthop-ip is.set)' / (nexthop-vr is.set) / nexthop-interface is.set) / (destination ip4.includes-full 172.33.10.0/23)
* type=static-route actions=delete | introduce new action
* type=rule | introduce actions=from-/to-remove-from-file:FILE.txt
* type=XYZ | introduce new arguments: shadow-loadreduce - to not update TAG object related address-groups | debugloadtime - display load time for specific XML sections
* develop | introduce config_validation.php
* type=appid-toolbox | improvements for further. new features - example rule address/service report generator
* type=rule actions=name-replace-character | set default value for replace to ''
* type=rule | introduce new actions=stats-appid-fastapi:-90days/stats-service-fastapi:/stats-address-source-fastapi/stats-address-destination-fastapi/stats-address-fastapi/stats-traffic-fastapi
* type=routing | introduce actions=exporttoexcel:file.html
* type=routing | introduce 'filter=(protocol.bgp is.enabled)'
* type=gcp | introdruce $namespace | improve handling for tenant like togglesvc
* type=xpath | introduce actions=remove | introduce 'filter-text=NODETEXT'
BUGFIX:
* class PANConf|VirtualSystem | bugfix to support SharedGateway also for Tag objects correctly
* type=xml-issue | bugfix to display read-only DeviceGroup duplicate address-group fixes correctly in summary
* type=address-merger | bugfix - do not merger address objects if tag count of planned merged object exceeds PAN-OS limit of 64 tag members
* type=address-merger | bugfix for removing tag objects from upper level, if adr merged objects are using them and tag is also available at address level
* bugfix for argument 'location=shared:excludemaindg' on FW config file
* type=schedule | bugfix actions=replacewithobject:OBJECTNAME
GENERAL:
* Class VirtualSystem/SharedGatewayStore | better handling of version variable
* update actions/filter JSON file
* APP-ID update to Device App-ID version: 8762-8327
2.1.18 (20230920)
BUGFIX:
* type=address/service 'actions=move:shared,skipIfConflict' | bugfix as variable $findSubSystem was not declared for targetlocation 'shared'
2.1.17 (20230920)
UTIL:
* type=certificate | extend to TemplateStack
* introduce class SharedGatewayStore | extend different classes to support SharedGateway
* type=zone | extend with SharedGateway
* type=rule | extend with SharedGateway
* type=service | improvement for SharedGateway - class VirtualSystem
* develop script "shared_gateway.php" | introduction
* type=address in=api://192.168.55.129 'actions=combine-addressgroups:{NEW_GROUP_NAME},true' 'filter=(name regex /{FILTER}/)'
* type=gcp actions=validation | introduction of new action
* type=gcp actions=image-validation | introduction of new action
* type=device | extend to display for FW config, per default also all sharedgateways in additional to vsys
BUGFIX:
* type=ssh-connector in=admin@MGMT-IP setcommand-file=set-commands.txt | bugfix to correctly send set commands
GENERAL:
* update App-ID version to: 8756-8298
2.1.16 (20230908)
UTIL:
* type=address | new 'filter=(name same.as.region.predefined)'
* class UTIL | extend if API mode - with App-id/AV/WF/Threat version info
* type=address | introduce 'filter=(tag is.set)'
* type=xml-issue | extend with rule tag object validation for twice set the same tag object
* introduce GroupTagRuleContainer to all Rule classes
BUGFIX:
* class Sub | bugfix for default-securiy-rules | if partial config is already available
* type=address-merger | bugfix to not delete TAG object from upperlevel if TAG object with same name exist at childDG
* type=address/service actions=move | bugfix if group with same name already exist - correctly skip movement
* class PANConf | fix for PHP 8.2
* type=address/service actions=move:shared location=any - bugfix for Firewall config
* type=rule-merger | bugfix to not add description twice, which exceeds description length to >1024
* type=tag actions=delete 'filter=(object is.unused) | bugfix for group-tag used in Rules, reference missing
* introduce GroupTagRulecontainer - to fix type=tag-merger issue if group-tag is used
* class PANConf - bugfix for type=stats on FW config for tmp/ghost object count on 'shared'
* type=XYZ outputformatset=setcommand.txt | bugfix to always have correct xPath availalble for set commands
* bugfix - related to TAG objects where name include character '(' and/or ')' - final fix for tag-merger including method createTag()
* bugfix for argument outputformatset - no multi-vsys device - remove vsys1 to fit set commands
GENERAL:
* develop pan-os-php-api | per default enable shadow-json checkbox - with shadow-nojson, output has a bug and filter are not working correctly - fixing later
2.1.15 (20230830)
UTIL:
BUGFIX:
* type=address/service 'filter=(object is.unused/is.unused.recursive) | overwritten objects used at higher DG level are now also used
* bugfix to create correct XML file Increament for prettyXML - so that it is identical to Panorama / Firewall created config
* README.md - fix broken links
GENERAL:
2.1.14 (20230829)
UTIL:
type=rule actions=display | introduction of argument actions=display:hitcount,ApplicationSeen
BUGFIX:
* type=vendor-migration | general bugfix to use correct baseconfig file if no argument in= is defined
* class AddressGroup | bugfix for missing function type() - related to type=address actions=move
* type=rule location=DG1 'actions=move:DG2,pre' - no rulename change
* class AddressCommon | bugfix if rule is already deleted - AddressRuleContainer is NULL => type=rule actions=removeWhereUsed
* type=rule | bugfix for actions=exporttoexcel - to correctly display columns
GENERAL:
* update to App-ID version: 8748-8241
2.1.13 (20230810)
UTIL:
* type=address | introduction of actions=upload-address-2cloudmanager:panorama.xml,DGname && actions=upload-addressgroup-2cloudmanager:panorama.xml,DGname
* type=address actions=upload-address-2cloudmanager | extend validation if object name is already available
* type=servicegroup-merger | introduce validation extension for childDG merger
* type=rule-compare | exend with argument 'keepJSONfile1' and 'reuseJSONfile1'
* type=rule-compare | introduce argument 'generateRuleHtmlFile'
* type=servicegroup-merger | extend with childancestor validation
* type=service actions=exporttoexcel:file.html | introduce additional arguments nestedmembers
* type=XYZ actions=exporttoexcel:file.html | use single function to create spreadsheet content
* type=dhcp | introduce actions=exporttoexcel:file.html
* type=dhcp | improvement for actions=exporttoexcel
* type=dhcp actions=display/exporttoexcel | extend with additional DHCP information
* type=rule 'actions=exporttoexcel:file.html,resovleservicesummary' | extend with column service_resolve_nested/_name/_value/_location
* type=service actions=exporttoexcel:file.html | correct predefined service-http/-https output
* type=address/server actions=exporttoexcel:file.html,nestedmembers | extend with column nested members location
* class Address - use $RuleReferenceLocation
* type=zone | introduce 'filter=(interface is.set)'
BUGFIX:
* class Region | bugfix - introduce method type() - to handle "type=address actions="
* type=address actions=move - bugifx/workaround - do not move region objects
* type=addressgroup-merger | bugfix to check childancestor objects availability
* type=addressgroup-merger | bugfix if multiple childDG has same objectgroup incl. value, but one differ; stop merging
* class AddressGroup | bugfix for method expand() - to correctly extract all submembers and their value for type=rule 'actions=exporttoexcel:file.html,resolveaddresssummary'
* type=address actions=exporttoexcel:file.html | bugfix to crash for tmp objects
* type=dhcp actions=exporttoexcel | bugfix to add correct template
* class PH - workaround for none working API mode connector - discard setType()
* class RULEUTIL - defaultSecurityRules not available in Fawkes Snippet
* type=rule - actions=display/exporttoexcel:resolveaddresssummary | add new src/dst_resovled_sum - for better nested calculation
GENERAL:
* PAN-OS dynamic content update to version 8741-8213
2.1.12 (20230731)
UTIL:
* type=bpa-generator | extend response output if not valid JSON
* type=gcp | extend for mysql usage and bring in mysql pw in type=key-manager
BUGFIX:
* type=XYZ | in=api://{MGMT-IP} actions=name-rename - bugfix for API usage
GENERAL:
2.1.11 (20230721)
UTIL:
* type=rule | introduce new 'filter=(timestamp-rule-creation <>=! -30 days)' | timestamp-rule-modification
* type=address | introduce 'filter=(value ip4.included-in RFC1918)'
* type=device | introduce actions=xml-extract
type=bpa-generator | extend output if task_id was not correctly available in response
BUGFIX:
* type=rule actions=exporttoexcel | bugfix for field 'ID' to not add additional data column
* type=rule actions=exporttoexcel:file.html,resolveAddresssummary | bugfix to display IP value summary for ip-wildmask objects
* class Addresscommon | bugfix for type=address-merger
GENERAL:
* general - update dynamic content to version: 8729-8157
* * class EthernetInterface - adding/removing address object instead of IP address - extend with stopping e.g. for type=address actions=name-rename if object is used on ethernet interface
2.1.10 (20230714)
UTIL:
* type=address | introduce actions=move-wildcard2network
BUGFIX:
* type=custom-url-category-merger | bugfix to merge correctly objects in DG hierarchy - add reason for exportcsv=file.html
* type=custom-url-category-merger | introduce argument allowaddingmissingobjects
* type=playbook | adjustment to fit to PHP version 8.1.x
GENERAL:
2.1.9 (20230712)
UTIL:
* type=key-manager - extend support for new connection method "in=sase-api://"
* type=address/service/rule/tag/schedule | enable support for actions=display with method "in=sase-api://"
* type=rule | introduce 'filter=(group-tag is.regex /VALUE/)'
* type=tag-merger | extend output why it can not be merged
* different object classes | introduction of sase-api connection - update / separation between XML API and SaseAPI
* type=address-/addressgroup-/service-/servicegroup-/tag-merger | extend with in=sase-api:// support
* in=sase-api:// - Strate Cloud Manager | extend reading objects based on type=
* type=rule | actions=display/exporttoexcel - extend additional argument ResolveAddressSummary with name/ip value from nested members
* type=xml-issue | extend check with secRule category field for ANY + other category configured
* type=custom-url-catgory-merger | introduction of new merger utility
* type=XYZ | actions=exporttoexcel:file.html - introduce ID field
* type=addressgroup-merger exportcsv=file.html | extend skipped information with reason column
BUGFIX:
* class Zone.php | bugfix to create XML node "zone" if not yet available during creating of a new Zone
* type=address-merger | bugfix if overwritten object has not same value
* type=vendor-migration | bugfix for wildcard 0.0.0.0 - do not replace leading 0
* type=tag in=sase-api:// | bugfix to handle tag color information correctly
* type=address actions=move:DGNAME | bugfix if same object name is available on upperlevel
* type=rule actions=exporttoexcel:FILE.html,resolveAddresssummary | bugfix correction of 0.0.0.0/24 to 0.0.0.0/0
* type=address | bugfix for dynamic address-groups which are using address objects with tag filter from upper level
* type=rule-compare | bugfix for correct address-group member IP resolution calculation based on rule DG membership
* type=addressgroup-merger | bugfix to NOT replace a member with same name as the AddressGroup
GENERAL:
* develop - start sase.php _ first version to use sase-api
* develop sase.php | check also post rulebase
* introduce a new connection method "in=sase-api://"
* general | introduce argument shadow-saseapiqa for in=sase-api://
2.1.8 (20230614)
UTIL:
* type=addressgroup-/servicegroup-merger - add additional output reason if groups can not be merged
* type=userid-mgr | correct usage of objectsLocation variable
* type=rule ruletype=nat | introduce 'actions=SNAT-set-interface:INTERFACE-NAME'
* type=dhcp | introduce 'actions=dhcp-server-reservation-create:IP,mac'
* type=service actions=name-charachter-replace:SEARCH,REPLACE - new default REPLACE value is ''
* type=service 'filter=(name regex /ARGUMENTS/) - introduce variables same way as type=address 'filter=(name regex //)- 'possible variables to bring in as argument: $$current.name$$ / $$protocol$$ / $$destinationport$$ / $$soruceport$$ / $$timeout$$'
* type=service | introduce actions=timeout-halfclose-set/timeout-timewait-set & filter=(timeout-halfclose is.set/timeout-timewait is.set / timeout-halfclose.value <>=! / timeout-timewait.value >,<,=,!
* type=address | introduce 'filter=(value netmask.blank32)'
BUGFIX:
* type=appid-toolbox | bugfix for none declared variable php 8.1
* type=rule | bugfix 'filter=(dst has.recursive.from.query subquer1)' - adjust behaviour as for 'src has.recursive.from.query'
* type=address actions=move:shared | bugfix - add validation if address object has tag, that this tag must be available at target DeviceGroup
* type=vendor-migration vendor=ciscoasa - bugfix if staticroute destination is using wildcard netmask
* type=rule ruletype=nat 'actions=snat-set-interface:ethernet1$$2' | bugfix to change config also in offline config mode
* type=application 'actions=move:DGname' | bugfix if XMLnode for TargetDG is not yet available
* type=software-remove - bugfix - skip wildfire remove - fix for PHP 8.1
GENERAL:
* develop f5_bigip.php | improvement - PANOS do not support ServiceGroup description
* general | dynamic content update to version 8721-8111
2.1.7 (20230525)
UTIL:
* type=xml-issue | extend for duplicate search on readonly device-group
BUGFIX:
* type=address-/service-merger | bugfix if two childDGs are having same object name and value - but somewhere in parentDG hierarchy below the target location DG planned for creating merged object - object with different value is available
* type=tag-merger | bugfix to exclude only these tag with different value (different color) - and merge with same value
GENERAL:
2.1.6 (20230525)
UTIL:
* type=rule-compare | improve output to also fit for argument 'shadow-json'
* class Address/ServiceCommon | improve text output for type=address-/service-merger
* type=upload | extend to copy XML node from argument in= to argument out= - first version focus on Device-Group
BUGFIX:
* type=service-merger | bugfix for merging objects which are overwritten but with different protocol
* type=address/service-merger | bugfix - extend validation if objects can be merged
* class PanoramaConf | bugfix for type=device actions=devicegroup-create:NAME,parent - parentDG was not set correctly
* type=address/service actions=move:DG | bugfix - add additional validation for move to upper/lower level DG - if another object with same name will change behaviour
* f5_bigIP | bugfix for ServiceGroup which can not handle Description based on PAN-OS
* type=addressgroup-/servicegroup-merger | bugfix - extend validation to not merge/move objects if not same members
* type=xml-issue | bugfix - wrong XML node variable used for application Node deletion
GENERAL:
* dynamic content updated to version: 8713-8071
2.1.5 (20230516)
UTIL:
* develop utility | introduce rule_compare_src_dst_srv_summary
* type=device | introduce actions=template-clone:NEWtemplateNAME 'filter=(name eq OLDtemplateNAME'
* type=rule actions=exporttoexcel:file.html,ResolveAddressSummary | extend with resolveValue field
* class RulewithUserID - read user information always as lower case - no case sensitive needed
* type=rule-merger | argument additionalmatch - change supported argument from 'logprof' to 'logsetting'
* type=address 'filter=(object is.region)' - extend display with custom region value information
* type=rule-compare | introduce new utility - to compare rule SRC/DST/SRV of two files
BUGFIX:
* type=address | bugfix for filter=(value string.XYZ ) if Object of type Region is hit
* type=rule-merger | bugfix if panoramapostrules and no rule are set for exportcsv
* class UrlCategoryRuleContainer | bugfix for PHP 8.1 - variable not set
* type=address-merger | picketObject from upperlevel of type TMP is not possible - do not merge
* general - different classes - reordering reading of region objects - as these are taking precedence compare to address-group and address
* type=service-merger | bugfix to not delete object if merge is not possible - rare condition related to object overwritten at lower level
* type=address-/service-merger | bugfix to NOT replace an overwritten object with different value with an object from upper level
GENERAL:
* extend resources folder for ip_Protocol and Region IPv4/v6 files
2.1.4 (20230512)
UTIL:
* type=vendor-migration | improve output if arguments are missing
BUGFIX:
* type=vendor-migration vendor=ciscoasa | fix to avoid none object to read isGroup()
* type=vendor-migration vendor=ciscoasa | bugfix for creating service - to not add e.g. tacacs as service port
GENERAL:
- update dynamic content to Device App-ID version: 8708-8036
- improvements for PHP8.2 - deprecated variable declaration | function utf8_encode()
2.1.3 (20230511)
UTIL:
* type=rule ruletype=nat | introduce 'filter=(natruletype is XYZ)' - 'ipv4', 'nat64', 'nptv6'
* type=rule ruletype=nat | introduce 'filter=(snatinterface is.set)'
* type=rule ruletype=nat 'actions=exporttoexcel:test-export-service.html' | introduce nat_rule_type
* type=rule ruletype=nat | actions=display - introduce dnattype, dnatdistribution
* type=rule ruletype=nat | introduce 'filter=( dnattype is.dynamic ) | (dnattype is.static) | (dnatport eq SERIVCEport) | (dnatdistribution is.round-robin / is.source-ip-hash / is.ip-modulo / is.ip-hash / is.least-session)
* type=rule actions=exporttoexcel:file.html | extend with dnat_type, dnat_port, dnat_distribution field
* type=rule ruletype=nat | introduce 'filter=(dnatport is.set)' - improvements to handle dnat fields
* type=gcp | improve helper tool for specific mgmtsvc tenant
* type=rule ruletype=nat actions=exporttoexcel:file.html | extend NAT rule information with dst_interface and snat_interface
* type=rule actions=exporttoexcel:file.html - rename column 'type' to 'rule_type'
BUGFIX:
* type=rule ruletype=nat 'actions=exporttoexcel:test-export-service.html,ResolveServiceSummary' | bugfix for service count
* type=rule ruletype=nat | bugfix for 'filter=(dnatport eq 22)' - (dnatport has xxx) delete as missleading information
GENERAL:
* remove alias | pa_migraiton-parser, pa_appidtoolbox-* - as now covered with alias 'pan-os-php type='
* update utility information about actions / filter
2.1.2 (20230428)
UTIL:
* type=rule-merger | introduce additionalmatch=logprof - to also check that only rules with same logging profile are merged
* type=device | introduce 'filter=(devicegroup with-no-serial)'
* type=gcp | introduce actions=offboard | extend authentication with automatically open Google Chrome
* type=appid-toolbox | introduction of new type | integrate appid migration run directly by using pan-os-php alias
* type=xpath | change all filter argument to start with "filter-"
* type=appid-toolbox | introduce additional arguments to better use in bash autocompletion script |p1-marker|p2-generator|p3-cloner|p5-activation|p6-cleaner
* type=rule ruletype=nat | introduce new 'filter=(snatinterface has.regex /VALUE/)'
BUGFIX:
* Dockerfiles | update
* type=device | fix object count for utilities
* type=vendor-migration vendor=ciscoasa | bugfix during original config storing
* class CONVERTER.php | bugfix for bidirNAT adjustment
GENERAL:
* class ServiceStore | loop detection - reduce mwarning output to a single finding per $groupName
* update bash_autocompletion/pan-os-php.sh
* introduce develop script cyclePanroama_ssh.php
* bash_autocompletion | class MAXMIND | class SSH_CONNECTOR - small adjustments
* develop start sonicwall.php EXP exported config migration
2.1.1 (20230419)
UTIL:
BUGFIX:
* Dockerfile update to get everything working with new type=vendor-migration
* class Rule.php - fix for PHP7
GENERAL:
2.1.0 (20230419)
UTIL:
* type=vendor-migration | introduce 3rd party Firewall configuration migration to PANOS XML config file
* type=vendor-migration | vendor=stonesoft - extend validation output
* type=register-ip | extend usage for Panorama registered-ip
* type=rule | actions=exporttoexcel - extend help information for applicationsee and hitcount
* type=xpath | introduce argument display-xmlLineNo
BUGFIX:
* class Snippet | bugfix add DataFilteringProfileStore
* type=address-merger | avoid error out on not yet supported classes Ethernet/TunnelInterface
* class Tag.php | bugfix for PHP 7
GENERAL:
* dockerfile update to ubuntu22 and php8.1
* general | introduce argument 'shadow-displayxmlnode'
* general | extend utilities for Fawkes/Buckbeak Snippets
* remove backtrace from mwarning - mostly related to Fawkes/Buckbeak Snippet config
2.0.75 (20230412)
UTIL:
* type=securityprofilegroup | introduce 'filter=(secprof is XYZ)' - inspecific to search all securityprofilegroups for secprof which are set to 'default'/'strict'
* type=diff | extend help information about usage
* type=device | introduce 'filter=(template has-multi-vsys)'
* type=rule | extend with actions=group-tag-remove | group-tag-set:GROUPTAGNAME
* type=rule | introduce 'filter=(group-tag is.set)'
* type=gcp | introduction of GCP helper tools
* type=config-size - extend for snippet
* class Interfacecontainer - extend warning with XML object information - relevant for CloudManagement object-variable validation
* type=device | introduce 'filter=(devicegroup has.vsys XYZ)' - extend output for actions=display
* type=rule | introduce 'actions=display-app-seen'
* type=gcp | improve actions=upload/download
* type=rule actions=exporttoexcel:file.html,RuleHit | exporttoexcel:file.html,ApplicationSeen
* type=securityprofile 'filter=(object is.unused)' - skip predefined objects
BUGFIX:
* type=rule ruletype=decryption | introduce category reading
* class SecurityRule | bugfix to correctly cleanup XML node 'profile-setting', if no SecurityProfile/SecurityProfileGroup is set
* type=rule | bugfix for API_showRuleHitCount
* type=rule | bugfix for actions=rule-hit-count-show / -clear
* type=securityprofile securityprofiletype=custom-url-category 'filter=(object is.unused)' - bugfix to add reference
GENERAL:
* cleanup alias.sh - remove deprecated util scripts which are directly supported with alias "pan-os-php type=XYZ"
* general update dynamic content version to 8690-7941
2.0.74 (20230315)
UTIL:
* type=securityprofile 'actions=custom-url-category-add-ending-token:/*' - add support for token '/*
* type=securityprofile | introduce actions=custom-url-category-remove-ending-token - 'custom-url-category-remove-ending-token:*' - '*' can only be added if '/' is last char
* type=rule actions=display shadow-json - improve output if source/destination isAny()
* type=custom-report | introduce new utility
* type=device | introduce 'filter=(name is.child.of DGNAME)'
* type=UTIL_merger scripts | extend with argument listfilters
* type=securityprofile actions=url-filtering-action-set:alert,CUSTOMURL - support customURL and not only predefined URL
BUGFIX:
* type=zone | actions=display bugfix
* type=securityprofile securityprofiletype=custom-url-category 'actions=custom-url-category-add-ending-token:*' - fix for token '*' to not skip
GENERAL:
* bugfixes for PHP version 8.2 - 'PHP Deprecated: Creation of dynamic property'
* class AppFilter / CallContext - improvement for PHP 8.2
* remove deprecated utilities scripts
* update util actions/filter files
* class TAG - improve PHPdoc - methods/variable declaration
* general - use 'XML_PARSE_BIG_LINES' on all classes where XMLfile is load
* update predefined to 8685-7918
2.0.73 (20230224)
UTIL:
* type=ssh-connector | introduction of new utility script
* type=address | introduce new 'filter=(reflocationtype is.template/is.only.template/is.devicegroup/is.only.devicegroup )'
BUGFIX:
* type=certificate | bugfix for reading hash for ec certificates
GENERAL:
* introduce PHP version validation - PHP 8.2 is NOT yet supported
2.0.72 (20230220)
UTIL:
* type=upload | improvement if in=api:// is used but no out= is defined
* type=device | actions=display-shadowrule:file.html - improvement to store full rule informtaion into html
* type=certificate | introduce 'filter=(publickey-algorithm is.rsa/is.ec) - publickey-hash is.sha1/is.sha256/is.sha384/is.sha512 - publickey-length <>!= VALUE
* type=certificate | introduce 'filter=(publickey-hash < sha256)'
BUGFIX:
* type=device | bugfix actions=display-shadowrule:file.html - to export correctly for all DG/vsys
* type=rule ruletype=defaultsecurity | bugfix to read predefined default-security-rules also if xpath post-rulebase is not set
* type=device actions=display-shadowrule | bugfix for multi-vsys
* type=device | actions=display-shadowrule devicetype=manageddevice - bugfix for html export to display correct serial/DG
GENERAL
* class Rule | improvement for type=rule 'filter=(hit-count.fast, timestamp-last-hit.fast and timestamp-first-hit.fast
2.0.71 (20230215)
UTIL:
* type=certificate | introduction of new utility script
* type=certificate | extend actions=display
* type=device | actions=display-shadowrule - extend with argument exportToexcel | actions=display-shadowrule:filename.html
BUGFIX:
* type=playbook | bugfix for missing validation of available array_key
* type=ironskilled-update | bugfix as ironskillet zpp has nothing for Alert_Only_Zone_Protection
* type=address-merger | bugfix class Address.php - not handled null validation
GENERAL
* general - update UTIL actions/filter
* update Dockerfiles | split correctly between amd/arm
2.0.70 (20230208)
UTIL:
* type=diff | redesign filter JSON "combinedruleordercheck" feature
BUGFIX:
* type=playbook | bugfix for missing validation of available array_key
* type=ironskilled-update | bugfix as ironskillet zpp has nothing for Alert_Only_Zone_Protection
* type=address-merger | bugfix class Address.php - not handled null validation
GENERAL
* general - update UTIL actions/filter
* update Dockerfiles | split correctly between amd/arm
2.0.69 (20230203)
UTIL:
* type=device | code improvements for actions=sp_spg-create-alert-only-bp/sp_spg-create-bp - reduce duplicate code
* type=rule | improve filters for ruletype=defaultsecurity
* type=overridefinder | improvement of usage message
* type=rule | extend validation for different rule actions and filters
* type=addressgroup-merger allowaddingmissingobjects allowmergingwithupperlevel | improve functionality to add / move missing objects
* type=diff filter=jsonfile.json | improved if combinedruleordercheck is set in JSON
* type=diff | filter=jsonfile.json - for exclude - introduce wildcard
BUGFIX:
* type=ironskillet-update | bugfix to download and store correct default iron-skillet snippets
* type=rule ruletype=defaultsecurity | bugfix to also import defaultSecurityRules, if only one was overwritten
* type=rule | bugfix for 'filter=(hit-count.fast <>!= XYZ)' via Panorama on multiple DG - but different content from FW
* type=diff filter=jsonfile.json | bugfix if include/exclude is not available at file to compare
* type=address-merger | bugfix if object from upperlevel value has /32 but DG object has only IP
GENERAL
* update default iron-skillet snippets
* docker introduce arm container
2.0.68 (20230130)
UTIL:
* type=diff | JSON filter - add also support for "/PATH/entry[@name='*']"
* type=diff | JSON filter file - support now combination of '*' and [text()[contains(.,'TEXT')]]
BUGFIX:
* type=diff | JSON filter file - additional rule order check did not import post rules correctly
* type=diff | bugfix - JSON filter file check not only * | check '*'
* type=rule | ruletype=defaultsecurity | bugfix to display rules | enable more actions related to defaultsecurityRules
* type=html-merger | bugfix for using argument 'adddefaulthtml' if no filename is specified
GENERAL
2.0.67 (20230127)
UTIL:
* type=playbook shadow-json | improved output
* type=application | introduce actions=delete and actions=delete-force
* type=html-merger | adjust helping information
* type=playbook | support reading argument projectfolder from JSON playbook file
* type=zone | actions=exporttoexcel - extend information with ZoneProtectionProfile
* type=rule actions=exporttoexcel:file.html - rename column 'security' to 'security-profile'
* type=html-merger | introduce argument 'adddefaulthtml' - to give the possibility to add a Excel TAB with descriptions
* type=diff | JSON filter file - allow * as wildcard | [was supporting only "/PATH1/entry[@name='*']/PATH2"]
BUGFIX:
* type=securityprofile | bugfix to delete also customURLProfile objects
* type=device | bugfix panos >100 - for all actions=*-create-*-bp to use coorect iron-skillet snippet
GENERAL
* update Dockerfiles related to ironskillet yaml usage
* set sleeping time for deprecated scripts to 600sec
2.0.66 (20230126)
UTIL:
* type=address/service | introduce 'filter=(reflocationcount ><=! NUMBER)'
* type=diff | introduce more options for 'filter=file.json' - 'added'/'deleted'/'moved' to not display xPath diff, if already accepted and known
* type=xpath | newly introduced utility to search for XML xpath value by using node-filter / xpath-filter / nameattribute-filter | additional output display-xmlnode, display-nameattribute
* type=diff | only avoid display of whitespaces in DIFF for xpath */certificate/ if flag is set
* type=rule-merger | improvements if DENY rules are found between possible rule for merging
* type=diff | introduce more options for 'filter=file.json' - 'combinedruleordercheck'
* type=diff | improve FinalResult output
* type=diff | filter JSON file with "combinedruleordercheck" - use Rule name and no longer UUID as unique key
* type=diff | if filter JSON file is using 'added'/'deleted' - ignore DIFF output
* type=diff | if filter JSON file is using 'empty' - ignore DIFF output of empty rules XMLnodes in DIFF output
* type=ironskillet-update | download yaml file
* type=ironskillet-update | introduce new iron-skillet yaml download and create XML snippets
* type=device | introduce 'actions=zpp-create-alert-only-bp' / 'actions=zpp-create-bp'
* type=diff | filter=jsonfile.json - introduction of ignoring diff output based on textnode for 'added'/'deleted'
BUGFIX:
* type=rule-merger | bugfix if argument exportcsv=xyz projectfolder=xyz and rules are skipped - to create skipped output file correctly
* class ReferenceableObject | bugfix for - type=rule 'filter=(reflocation is.only DGNAME)'
* type=address | bugfix for 'filter=(reflocation is DGNAME)' if multiple reflocation are used
* class RULE.php method load_common_from_domxml() | bugfix to NOT set reference for group-tag - fix problems with tag-merger
* class SecurityRule | bugfix for qos -> marking
* type=playbook | bugfix for new php version - missing variable declaration
* dockerfile add missing folder iron-skillet | fix for all iron-skillet relevant type=device action=....-create-bp parts
* type=diff | filter JSON file 'added'/'deleted' - bugfix to get for each entry the correct diff output
* type=html-merger | bugfix for missing projectfolder argument / introduce try and catch if pyhon is not installed
* type=device 'actions=manageddevice-delete' | bugfix for offline config
GENERAL
* update js and json file for bash_completion
* type=rule | update filter description for 'filter=(timestamp-first-hit.fast/timestamp-last-hit.fast <,>,= VALUE)' as of a PHP v7 handling problem
* update license info | introduce new migration scripts for different vendors, under tag develop
* develop | migration pulse - introduce rule-merging functionality only for pulse migration - should be general available
* develop migrate bluecoat | introduce new argument 'loadxmlfromfile'
* general - update dynamic to version 8668-7812
2.0.65 (20221215)
UTIL:
* type=rule | introduce 'filter=(hit-count.fast >,<,=,! VALUE)'
* type=device | now support for Fawkes config snippet
BUGFIX:
type=rule 'filter=(timestamp.last-hit.fast = 0)' bugfix to avoid error out
type=rule 'filter=(timestamp-last-hit.fast < 10/01/2021)' | bugfix to not show rules which are unused
GENERAL
* update to Palo Alto Networks content version 8648-7733
2.0.64 (20221203)
UTIL:
* type=xml-issue | improve counting for applicationgroup/customurl fixes
* type=address | improvement for actions=name-rename
* type=address | introduce new 'actions=value-replace:SEARCH,REPLACE'
* type=rule actions=exportToExcel:file.html | introduce additionalFields 'resolveServiceAppDefaultSummary'
* type=rule | introduction of 'filter=(service no.app-default.ports)'
BUGFIX:
* type=diff | bugfix for shadow-json - to display also diff information if xml node value only change
* type=xml-issue | fix counting for service objects with double spaces in name
GENERAL
* pan-os-php-api - develop | improvements to use docker-compose with user DB
* set_alias_usage.sh | improvement to dyamically read correct full path where pan-os-php files are available
2.0.63 (20221024)
UTIL:
* type=securityprofile | introduce process of DataFilteringProfileStore
* type=address/rule actions=description-Replace-Character | add variable $$forwardslash$$ and $$colon$$
* create_vwire.php | update to use JSON file
* develop get_counter.php | fix to get newest information from website
* util develop - extend display-xpath-for-node-filter.php with argument 'nameattribute=XYZ'
* type=xml-issue | extend address check with ip-range; optimise if address value is /32; introduce same improvement for duplicate servicegroups as already in addressgroup
BUGFIX:
* type=address actions=move | bugfix for Firewall config type
* type=diff | bugfix to display changes in same single XMLnode without child node correctly
GENERAL
* update App-ID version: 8632-7647
2.0.62 (20221010)
UTIL:
* type=rule | introduce 'actions=user-replace:OLD-username,NEW-username' and 'actions=user-replace-from-file:FILE.txt'
* type=rule | implement group-tag usage for actions=display / 'filter=grouptag is TAGNAME'
* type=device actions=sp_spg-create-alert-only-bp:true | ironskillet update for panos 10.2
* type=rule | introduce actions=rule-hit-count-show / rule-hit-count-clear
BUGFIX:
* type=rule/schedule 'filter=(schedule.expire.in.days > -90) / (expire.in.days > -90) | bugfix for negative numbers
GENERAL:
2.0.61 (20221004)
UTIL:
* type=rule | introduce 'filter=(url.category.count ><=! NUMBER)'
* type=address | improve "help create-address" - improve also actions=display
BUGFIX:
* class Panorama/Pan/FawkesConf - save_to_file set indentingXmlIncreament to default without an encrease with +1
* type=device actions=sp_spg-create-bp:false | if no name argument is defined 'sp_spg-create-bp:[shared], sp-name' use predefined array
* class RulewithUserID - bugfix for known-user
GENERAL:
* improve classes BuckbeackConf / FawkesConf - to avoid creating XML node if not needed
* extend class Container/DeviceCloud/DeviceOnPrem with DataFilteringProfileStore
2.0.60 (20220926)
UTIL:
* develop ssh-connector | introduce argument password
* type=rule actions=description-append | introduce $$current.name$$ a stringformular
2.0.59 (20220924)
UTIl:
* type=html-merger | introduce argument exportcsv=filename.xslx
* type=tsf | introduce TechSupportFile - to extract running-config.xml from TSF
* type=address - 'filter=(refobjectname is XYZ)' extend to support rule name
BUGFIX:
* type=xml-issue | bugfix to store output file also if pan-os API mode is used
* type=stats | bugfix for loadpanoramapushedconfig
GENERAL:
* introduce development script gcp
2.0.58 (20220908)
UTIL:
* type=rule - improve filters for CI/CD
* type=rule ruletype=any | introduce all filter/actions related to schedule for DoS/Pbf/Qos Rules
* type=rule | introduce ruletype=defaultsecurity
* type=device - extend all parts DG/template / template-stack with config-size information
* type=config-size - optimise output
* type=rule | extend 'filter=(secprof ......)' for ryletype=defaultsecurity
* type=rule | introduce ruletype=sdwan,networkpacketbroker
BUGFIX:
* type=rule/schedule | bugfix for is.expired
* type=rule | actions=securityprofile... - fix to support DefaultSecurityRule
* type=xml-issue | bugfix for Zone
* type=rule ruletype=defaultsecurity | bugfix for actions=exporttoexcel
GENERAL:
* introduce class DefaultSecurityRule - extend on all parts
* extend usage of DefaultSecurityRule to class Container/DeviceCloud/DeviceOnPrem
* class DefaultSecurityRules - skip reading source/destination/from/to
* pan_php_framework - optimise method convert()
* class AddressStore | loop dependencies error with more details
* introduce GTP/SCEP/PacketBroker/SDWAN-ErrorCorrection/-PathQuality/-SaasQuality/-TrafficDistribution Classes
* introduce Profile DataObjects Class
2.0.57 (20220905)
UTIL:
* type=rule | introduce new 'filter=(uuid eq 1234567890)'
* type=rule | introduce 'actions=name-rename:$$current.name$$-$$uuid$$'
* type=stats | improvement to get exportcsv=file.csv working for argument location
* type=ALL - introduce optional argument for location=DGname:includeChildDgs / location=DGname:excludeMainDg
* type=ALL - introduce again argument shadow-apikeyhidden
BUGFIX:
* type=address/service | fix for actions=name-rename - to skip if string length > 63
* type=address actions=value-host-object-add-netmask-m32 | skip if IPv6 address
* type=playbook | skip creating out file for usage of html-merger
* type=address | improvement for ipv6 if 'actions=name-rename:host.pub_$$value.no-netmask$$-$$netmask$$'
* type=address-merger | bugfix for fqdn objects with different value but same name spread of DG hierarchy
* type=ALL | argument location=DGname:includeChildDgs - bugfix if DG is not found
* type=rule | bugfix for 'filter=(schedule is.expired)'
GENERAL:
* class PanoramaConf | improve output if parentDG can not be calculated for DeviceGroup
* update git-php
* class AddressStore - revert group loop check
2.0.56 (20220829)
UTIL:
* type=stats - improvement for JSON output
* type=zone | introduce actions=display userid information | 'filter=(userid is.enbaled)'
* type=zone | introduce actions=userid-enable:{BOOL} - per default {BOOL} is TRUE
* type=service | introduce actions=timeout-inherit - to disable timeout override and inherit from application
* type=service | improve actions=description-append:{TEXT} - with an additional variable $$current.name$$
BUGFIX:
* type=device | bugfix for actions=exportLicenseToExcel:file.html
* class AddressGroup | fix for XML rewrite if addressgroup isdynamic
GENERAL:
* class UTIL - argument template=XYZ - improve output message if template not found
* playbook json files | introduce rule-merger.json - small optimistation for panorama clean-up
* improve test_rule_merger - to read input file
* UI - optimisation for offline/online mode - introduce new preparation.php to upload file / create apikey
* UI - development - continue working on multi-user mode
* UI - improvement for multi-user usage - projectfolder - panconfigkeystore
2.0.55 (20220808)
UTIL:
* type=addressgroup-/servicegroup-/service-merger | introduce dupalgorithm=identical
* type=servicegroup-merger | introduce childDG validation
* type=addressgroup-/servicegroup-/merger - for childDG object move; correct hashmap object array of actual DG
BUGFIX:
* type=diff "filter=XPATH" | bugfix as filter was not used
* type=UTIL-merger | fix for Buckbeak validation
GENERAL:
* extend different Fawkes and Buckbeak related classes
* improve bash completion script
* class TemplateStack | introduce method setName()
* class PanoramaConf | introduce method removeTemplateStack - improve removeDeviceGroup and removeTemplate
* class MERGER | method servicegroup_merger - correct variable name
* test script optimisation - MERGER output adjustment
2.0.54 (20220803)
UTIL:
* type=rule | new 'filter=(service.object.count ><=! VALUE)'
* type=service-merger | improve output for exportcsv
* type=rule-merger | improve output for exportcsv
* type=diff | introduce working argument shadow-json
* type=rule | introduce new 'filter=(service timeout.is.set)' | improve for 'filter=(service.object.count <>=! VALUE)'
BUGFIX:
* type=service-merger | bugfix if service timeout is set and on childDG compare to parentDG the timeout differ
GENERAL:
2.0.53 (20220802)
UTIL:
* class MERGER | code cleaning - improvement to use methods | benefit for service-/tag-/addressgroup-/servicegroup-merger
2.0.52 (20220801)
UTILS:
* type=device | introduce 'filter=(name is.in.file FILE)'
BUGFIX:
* type=device actions=manageddevice-delete/-create | fix/rework method
* type=rulemerger | bugfix for exportcsv if rule is skipped because of deny or none matching filter
GENERAL:
* update dockerfiles and install_script_ubuntu
2.0.51 (20220731)
UTILS:
* UTIL different classes - improvement for usage output
* type=stats | introduce argument exportcsv=json.csv - to get stats exported in CSV
* type=diff | final improvement for stdout of diff
BUGFIX:
* class ObjectwithDescription | method description_merge() - do not merge description if other description is empty`
* type=address-/service-/tag-merger | bugfix if object creation, to update objects in memory for merging part
GENERAL:
2.0.50 (20220729)
UTILS:
* type=dhcp - introduction
* development ike.php - extension for GreTunnel
* type=rule-merger | improved exportcsv to also display the original rule which is getting manipulate
* type=address-merger | improvements for dupalgorithm=identical - do not create new objects
BUGFIX:
* type=diff | bugfix if argument filter is used with $$name$$
* type=diff filter=jsonfile.json | bugfix if no include filter is set but exclude must be triggered
* type=[object]-merger | bugfix to use location=DG1,DG2
* typ=address-merger dupalgorthm=identical | bugfix to NOT merge not identical objects but same value from childDG #584
* type=address-merger | fix pickfilter if allowmergingwithupperlevel is used
GENERAL:
* bash autocompletion - extension for actions= filter=
* introduce class DHCP / GreTunnel and all respective additions for UTILS
* different classes | extend validation for usage of json_decode
* update dynamic content version to 8597-7479
2.0.49 (20220726)
UTILS:
* pan-os-php type=diff | introduce for argument filter=JSONFILE.json
* type=diff | introduce of filtering on xpath with name1 and name2 arguments as variable
* type=diff | extend usage help for all possible arguments
BUGFIX:
* class UTIL | bugfix if no timezone setting can be found
GENERAL:
* update util_action_filter.json file
2.0.48 (20220720)
UTILS:
* UTIL type=securityprofile securityprofiletype=url-filtering | improvements actions=url-filtering-action-set:[ACTION],[category]
* UTIL type=rule | introduce ruletype=tunnelinspection
BUGFIX:
* UTIL type=address/service/tag/application/zone | bugfix for 'filter=(object is.unused)' - direct benefit of class TunnelInspectionRule
* class logwriter/UTIL - fix to use settimezone() also on Expedition-Converter
* class Manageddevice - bugfix for reading manageddevice from Panorama
* class CIDR | bugfix for specific use case
GENERAL:
* introduce class TunnelInspectionRule
2.0.47 (20220714)
UTILS:
* UTIL type=Rule | introduce 'filter=(app has.fromquery subquery1)' 'subquery=([application filters])'
* UTIL type=rule | introduce 'filter=(app risk.recursive.is 3)'
* update internal JSON files for pan-os-php API usage
* multiple classes | improvements for buckbeak
* UTIL type=service-merger | improvements for exportcsv
* UTIL type=upload - extend help information
* UTIL type=securityprofile securityprofiletype=url-filtering | introduce actions=url-filtering-action-set:[ACTION],[category]
BUGFIX:
* class AppRuleContainer | bugfix for method membersExpanded()
GENERAL:
* update predefined to 859207467
2.0.46 (20220708)
UTILS:
* class DeviceOnPrem - introduction - Buckbeak - improving other Rule classes to be prepared for Snippets
* Buckbeak - different classes - improvement to support new DeviceOnPrem / Snippet feature
* UTIL type=[all-merger] - improve exportcsv export if argument projectfolder is used
BUGFIX:
* UTIL type=xml-isse | bugfix for checking 'groups with own membership as subgroup'
* Update class cidr | bugfix for Buckbeak address object variable handling
* class Container/DeviceCloud/DeviceOnPrem | bugfix add missing region XML reading
GENERAL:
* updating Docker files
* Update READMEdocker - improving workflow Container update
* class FawkesConf | introduce findDeviceOnPrem / createDeviceOnPrem
* class ManagedDeviceStore | introduce method createManagedDevice for Panorama and Fawkes
2.0.45 (20220630)
UTILS:
* UTIL type=device | actions=display show Container hierarchy for Fawkes
* UTIL type=stats | improve visibility for securityprofiles
BUGFIX:
* UTIL type=securityprofilegroup | bugfix for fawkes config
GENERAL:
2.0.44 (20220629)
UTILS:
* UTIL type=xml-issue | extend visibility for removing duplicate address/service objects
* UTIL type=device | introduce actions=manageddevice-create / manageddevice-delete
* UTIL type=device | introduce actions=DeviceGroup-removeSerial/DeviceGroup-addSerial
BUGFIX:
* UTIL type=securityprofile actions=delete - bugfix to get API mode working
* UTIL type=address-merger | bugfix if one of the object has an empty description string
GENERAL:
2.0.43 (20220622)
UTILS:
* UTIL type=rule | introduce new actions=app-postgres-fix
* UTIL type=securityprofile securityprofiletype=custom-url-category | introduce actions=custom-url-category-fix-leading-dot
* UTIL type=address actions=create-address-from-file:FILE.txt - introduce two new bool argument: force-add-to-group' / 'force-change-value
* UTIL type=rule action=description-Replace-Character | introduce variable $$newline$$
* UTIL type=rule-merger | introduce tag 'merged' and extend description which rules were merged
* UTIL type=rule-merger | introduce argument exportCSV=merged.html
BUGFIX:
* class DH - set commands fix of FROM/TO field of rules
* UTIL type=address actions=create | bugfix if exiting object is of type address-group
* class DH - bugfix for "set commands" if value contains newline
* UTIL type=address actions=create-address-from-file | bugfixes
* UTIL type=rule-merger | merging description correctly
* class ServiceStore | bugfix to NOT error out if duplicate servicegroup and service are available
* UTIL type=rule-merger | bugfix for missing variables
GENERAL:
* update to Device App-ID version: 8571-7398
* docker container update install more python modules
2.0.42 (20220515)
UTILS:
* UTIL type=address 'actions=exporttoexcel:FILE.html,ResolveIP|NestedMembers' - extension with nested IP members ip resolution and count
* UTIL type=address 'filter=(ip.count > 200)' now also working for address-groups
* UTIL type=service | introduce actions=exporttoexcel:file.html port.count | filter=(port.count ><= VALUE)
* UTIL type=address improve: 'actions=description-Replace-Character:$$comma$$word1'
* UTIL type=rule improve: 'actions=description-Replace-Character:$$comma$$word1'
BUGFIX:
GENERAL:
2.0.41 (20220512)
UTILS:
* UTIL type=address-/service-merger | export also skipped objects
* UTIL type=address actions=exportToExcel:FILE.html,resolveIP - improvement for dynamic AddressGroup
* UTIL type=xml-issue | extend for SecRule from/to duplicate search and readonly template-stack
BUGFIX;
* UTIL type=ALL-MERGER | bugfix for argument outputformatset - display objectname if delete
GENERAL:
2.0.40 (20220509)
UTILS: