Connect your own PAN-OS firewall(s) and/or Panorama management server to manage security rules, address/service objects, zones, interfaces, device groups, managed devices, templates, and commit/ pu...
What this app can do
31 tools registered
Connect PanosFree
Connect a PAN-OS firewall by saving its host and admin credentials, after exchanging them once for an API key.
Connect PanoramaFree
Connect a Panorama instance by saving its host and admin credentials, after exchanging them once for an API key.
List ConnectionsFree
List the connected PAN-OS firewalls and Panorama instances.
Disconnect Palo AltoFree
Disconnect a PAN-OS firewall or Panorama instance: deletes the saved API key. Nothing on the device itself is changed.
List Security Rules8 tok
List security policy rules on the connected PAN-OS firewall.
Get Security Rule8 tok
Read one security rule in full by name.
Create Security Rule16 tok
Create a new security policy rule on the connected PAN-OS firewall. This does not take effect until you commit.
Update Security Rule16 tok
Update an existing security rule's action and/or enabled status. This does not take effect until you commit.
Delete Security Rule16 tok
Permanently delete a security policy rule. This does not take effect until you commit.
Reorder Security Rule16 tok
Move a security rule before or after another rule in the rulebase. This does not take effect until you commit.
List Address Objects8 tok
List address objects (IP/CIDR/range/FQDN) defined on the connected PAN-OS firewall.
Create Address Object16 tok
Create a new address object (ip-netmask, ip-range, or fqdn). This does not take effect until you commit.
Update Address Object16 tok
Update an existing address object's value. Infers ip-netmask vs fqdn from the new value's shape -- to change ip-range/fqdn use delete+create instead. This does not take effect until you commit.
Delete Address Object16 tok
Permanently delete an address object by name. This does not take effect until you commit.
List Address Groups8 tok
List address groups (named collections of address objects) defined on the connected PAN-OS firewall.
List Service Objects8 tok
List service (port) objects defined on the connected PAN-OS firewall.
Create Service Object16 tok
Create a new service (port) object on the connected PAN-OS firewall.
Update Service Object16 tok
Update a service object's port range. To change protocol, delete and recreate instead.
Delete Service Object16 tok
Permanently delete a service object by name.
List Zones8 tok
List security zones configured on the connected PAN-OS firewall.
List Interfaces8 tok
List network interfaces configured on the connected PAN-OS firewall.
Get System Status8 tok
Read the connected PAN-OS firewall's own system status: hostname, model, serial, software version, uptime.
Commit Config16 tok
Commit the connected PAN-OS firewall's pending configuration changes so they take effect. Firewall config edits (security rules, address/service objects) sit uncommitted until this runs -- same explicit-commit convention as ZIA's activate_zia_changes.
List Device Groups8 tok
List device groups configured on the connected Panorama.
List Managed Devices8 tok
List FortiGate-equivalent PAN-OS devices managed by the connected Panorama.
Get Managed Device8 tok
Read one Panorama-managed PAN-OS device in full by serial number.
List Templates8 tok
List configuration templates defined on the connected Panorama.
List Panorama Security Rules8 tok
List security (pre/post) rules configured for a Panorama device group.
Push To Devices16 tok
Push a Panorama device group's configuration out to its managed devices -- same as the 'Push' button in the Panorama web UI.
Bulk Security Rule Action60 tok
Enable or disable several PAN-OS security rules in one call, by explicit rule names. Continues past per-item failures and reports each outcome, same convention as every other bulk_* tool in the portfolio.
Audit Panw Estate40 tok
Run a read-only health audit across all connected PAN-OS/Panorama connections: disabled security rules with broad 'any' source/destination, offline Panorama-managed devices, and rules with no logging configured. Same convention as Fortinet Connector's audit_fortinet_estate.