search

PaloAltoNetworks / pan-os-python

The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.
https://pan-os-python.readthedocs.io
ISC License
344 stars 170 forks source link

How to get "global find" functionality with pan-os-python #559

Open adi105 opened 6 months ago

adi105 commented 6 months ago

Within PAN GUI, we can utilize the global find feature to identify the references of an object. Is there a way to mimic this behavior with pan-os-python?

As a specific example, let's say we have an AddressObject variable "addr" which points to an AddressObject, and we know that this object is referenced in three security PreRules across three different DeviceGroups in our PAN config. How can we obtain the rules in which this AddressObject is used?

In case there is an easier way to accomplish my end goal: I am trying to perform cleanup of duplicate AddressObjects (different names, same value). To do this, I am finding all duplicates, selecting one to keep, and wanting to replace all references of the old duplicate Address with the master address, then delete it. If there is a simpler way to accomplish the end goal, I am open to it.

Thanks in advance.

FliesLikeABrick commented 3 months ago

We are also interested in this