Skip to content

Latest commit

 

History

History
51 lines (40 loc) · 1.48 KB

READMEcustomScripting.md

File metadata and controls

51 lines (40 loc) · 1.48 KB
Raw

Usage

With less than 20 lines of code, you should be able to solve most of your needs. Brief overview:

Available arguments for your script:

  • in=file.xml or in=api://192.168.10.1
  • out=file_output.xml [not needed if connection is API]
  • location=vsys1 [default if not used; FW->'vsys1' / Panorama->'shared' ]

Loading a config from a file / API candidate config for PAN-OS Firewall or Panorama:

    require_once "lib/pan_php_framework.php";    
    require_once "utils/lib/UTIL.php";
    
    $util = new UTIL("custom", $argv, __FILE__);
    $util->utilInit();
    
    $util->load_config();
    $util->location_filter();

    $pan = $util->pan;

Delete unused objects from a config :

    foreach($pan->addressStore->addressObjects() as $object )
      if( $object->countReferences() == 0 )
        $pan->addressStore->remove($object);

Want to know where an object is used ?

    $object = $pan->addressStore->find('H-WebServer4');
    foreach( $object->getReferences() as $ref )
       PH::print_stdout( $ref->toString() );

Replace that object by another one :

    $object->replaceMeGlobally($anotherObject);

Want to add security profile group 'Block-Forward-Critical-High' in rules which have destination zone 'External' and source zone 'DMZ'?

    foreach( $pan->securityRules->rules() as $rule )
       if( $rule->from->has('DMZ') && $rule->to->has('External') )
           $rule->setSecurityProfileGroup('Block-Forward-Critical-High');