Importer - palo alto module advanced features - Githubissues

CactuseSecurity / firewall-orchestrator

Network Security data repository for automation, reporting and compliance of firewall rules

https://fwo.cactus.de

Apache License 2.0

33 stars 11 forks source link

Importer - palo alto module advanced features #24

Open tpurschke opened 4 years ago

tpurschke commented 4 years ago

general information

api based (api exists both for panorama mgmt and fw gw)
2 different apis exist (xml, rest) --> ignoring XML, just using REST
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClZLCA0
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/about-the-pan-os-xml-api.html

basic importer

[x] import from Palo Alto FW itself
[ ] import from Panorama
[x] import network objects (simple, groups)
[x] import services
[x] import service lists ('843,4530-4533,6060-6063,9090-9093,19090-19093')
[x] import access rules
[x] import applications

advanced / procrastinated functionality

[ ] import users
[ ] add multiple zones per rule (db changes needed)
[ ] import nat rules
[ ] deal with tagging
- [ ] import dynamic network groups defined by tags
[ ] get intrazone and interzone default rules
[ ] add vsys support

gammelich commented 1 year ago

There has been an opportunity to join a PoV. Within this PoV Palo would have been required as knock out criteria. Customer is utilizing palos labelling feature. Adding this feature might allow application to PoVs / PoCs in future as Palo shows up quite often in Customers environments lately.