### Bootstrap Firewall Configuration Example (init-cfg.txt) Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions This example showcases a sample `init-cfg.txt` file used for bootstrapping a firewall via USB. It includes essential network and management settings required for the initial setup of the device. ```text #init-cfg.txt # Management Interface Configuration configure net management ip 192.168.1.1 netmask 255.255.255.0 default-gateway 192.168.1.254 # DNS Settings configure network dns servers primary 8.8.8.8 secondary 8.8.4.4 # Panorama Integration (Optional) # configure panorama server token # Device Settings set device hostname my-firewall set device domain paloaltonetworks.com # Commit Changes configure commit ``` -------------------------------- ### Getting Started with the PAN-OS REST API Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions Guides users on how to access the PAN-OS REST API and understand its request and response structures. ```APIDOC ## Getting Started with the PAN-OS REST API ### Description This section provides instructions on how to access the PAN-OS REST API and explains the fundamental structure of requests and responses used within the API. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example ```json { "example": "GET /api/v1/system/info" } ``` ### Response #### Success Response (200) - **data** (object) - Contains the payload of the API response. - **code** (integer) - HTTP status code. #### Response Example ```json { "example": "{\n \"code\": 200,\n \"data\": {\n \"hostname\": \"PA-VM\",\n \"version\": \"10.2.0\",\n \"serial\": \"PAabcdef123456789\"\n }\n}" } ``` ``` -------------------------------- ### Getting Started with the PAN-OS XML API Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions An introduction to the PAN-OS XML API, including exploring its capabilities via the browser and CLI, understanding request structure, error codes, and XPath. ```APIDOC ## Getting Started with the PAN-OS XML API ### Description This section provides a comprehensive guide to begin using the PAN-OS XML API. It covers exploring the API using the XML API Browser and CLI, understanding the structure of API requests, handling error codes, and utilizing XPath for node selection. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example ```json { "example": "\n" } ``` ### Response #### Success Response (200) - **response** (element) - Contains the result of the API request. - **result** (element) - Contains the data returned by the command. #### Response Example ```json { "example": "\n\n \n \n PA-VM\n 192.168.1.1\n 255.255.255.0\n 192.168.1.254\n unassigned\n fe80::xxxx:xxxx:xxxx:xxxx/64\n unassigned\n 00:50:56:xx:xx:xx\n \n 1 days, 2 hours, 30 minutes\n 2025/12/31\n 0123456789ABCDEF\n 8745-7890\n 8745-7890\n < வைரাস-definition-version>8745-7890\n 8745-7890\n 8745-7890\n 8745-7890\n 1.0\n azure\n azure\n 10.2.0\n 1.0\n PA-VM\n \n \n ``` -------------------------------- ### Configure Admin Role Profile Example (PAN-OS) Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions This snippet demonstrates how to construct an example administrative role profile for managing firewall access and permissions. It outlines the structure for defining granular access to various firewall functionalities and tabs. ```xml security-admin Role for security administrators yes yes yes yes yes yes yes yes yes ``` -------------------------------- ### PAN-OS REST API Use Cases Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions Demonstrates various use cases for the PAN-OS REST API, including working with objects, security policies, zones, interfaces, and more. ```APIDOC ## PAN-OS REST API Use Cases ### Description This section explores practical applications of the PAN-OS REST API for managing various aspects of the firewall configuration, such as creating and modifying objects, security rules, interfaces, and other network components. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example #### Create a Security Policy Rule (REST API) ```json { "example": "POST /api/v1/policies/security\n{\n \"name\": \"Allow-Web-Traffic\",\n \"description\": \"Allow HTTP and HTTPS traffic\",\n \"source-zones\": {\n \"member\": [\"trust-zone\"]\n },\n \"destination-zones\": {\n \"member\": [\"untrust-zone\"]\n },\n \"source-addresses\": {\n \"member\": [\"any\"]\n },\n \"destination-addresses\": {\n \"member\": [\"any\"]\n },\n \"applications\": {\n \"member\": [\"web-browsing\", \"ssl\"]\n },\n \"actions\": {\n \"action-type\": \"allow\"\n }\n}" } ``` #### Configure a Security Zone (REST API) ```json { "example": "POST /api/v1/network/zones\n{\n \"name\": \"DMZ\",\n \"description\": \"Demilitarized Zone\",\n \"network-type\": \"layer3\"\n}" } ``` #### Work With Decryption (APIs) ```json { "example": "// Examples for managing SSL/TLS decryption profiles and policies.\n// Refer to specific API documentation for decryption-related endpoints." } ``` ### Response #### Success Response (200) - **data** (object) - Contains the result of the operation. - **code** (integer) - HTTP status code. #### Response Example ```json { "example": "{\n \"code\": 200,\n \"data\": {\n \"message\": \"Security policy rule created successfully.\"\n }\n}" } ``` ``` -------------------------------- ### PAN-OS XML API Use Cases Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions Illustrates practical applications of the PAN-OS XML API for common administrative tasks such as upgrades, user management, content updates, policy enforcement, and more. ```APIDOC ## PAN-OS XML API Use Cases ### Description This section provides practical examples and explanations of how to leverage the PAN-OS XML API to accomplish various administrative and management tasks on Palo Alto Networks firewalls. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example #### Upgrade a Firewall to the Latest PAN-OS Version (API) ```json { "example": "// Example involves uploading the PAN-OS image and initiating the upgrade process via API calls. // Refer to specific API documentation for upload and upgrade commands." } ``` #### Show and Manage GlobalProtect Users (API) ```json { "example": "\n" } ``` #### Automatically Check for and Install Content Updates (API) ```json { "example": "\n" } ``` #### Manage Certificates (API) ```json { "example": "// Example involves importing, exporting, or showing certificate details. // Refer to specific API documentation for certificate management commands." } ``` ### Response #### Success Response (200) - **response** (element) - Indicates the success or failure of the API operation. - **result** (element) - Contains the data relevant to the use case. #### Response Example ```json { "example": "\nGlobalProtect users displayed successfully." } ``` ``` -------------------------------- ### PAN-OS XML API Authentication and Security Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions Covers enabling API access and generating API key certificates for secure interaction with the PAN-OS XML API. ```APIDOC ## API Authentication and Security ### Description Details on how to enable API access and generate API key certificates for securing your interactions with the PAN-OS XML API. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example N/A ### Response N/A ``` -------------------------------- ### PAN-OS XML API Request Types and Actions Source: https://docs.paloaltonetworks.com/ngfw/administration/monitoring/use-syslog-for-monitoring/syslog-field-descriptions Details on different types of requests to the PAN-OS XML API, including configuration, commit, operational commands, reports, file operations, and log retrieval. ```APIDOC ## PAN-OS XML API Request Types and Actions ### Description This section outlines the various types of requests you can make to the PAN-OS XML API, enabling you to perform actions such as configuration management, committing changes, executing operational commands, retrieving reports, managing files, and accessing logs. ### Method N/A (Configuration Guide) ### Endpoint N/A (Configuration Guide) ### Parameters N/A ### Request Example #### Configuration ```json { "example": "\n" } ``` #### Commit ```json { "example": "\n" } ``` #### Run Operational Mode Commands ```json { "example": "\n" } ``` #### Get Reports ```json { "example": "\n" } ``` #### Export Files ```json { "example": "\n" } ``` #### Import Files ```json { "example": "\n" } ``` #### Retrieve Logs ```json { "example": "\n" } ``` ### Response #### Success Response (200) - **response** (element) - Contains the result of the API request. - **result** (element) - Contains the data or status of the operation. #### Response Example ```json { "example": "\nConfiguration applied successfully." } ``` ```