BETA testing of CloudManagement access via in=sase‐api: {{tsg_id}}

The actual BETA developed code base is available via:

• GitHub:

https://github.com/swaschkut/pan-os-php

• or via Docker Container:

docker run --name panosphp --rm -v ${PWD}:/share -it swaschkut/pan-os-php:develop

---

for the CloudManagement connection you need a SASE API Service Account, Check here how to create one:

https://github.com/PaloAltoNetworks/pan-os-php/wiki/in=sase%E2%80%90api:--%7B%7BTSG_ID%7D%7D---how-to-get-Prisma-SASE-API-Service-Account-credentials how-to-get-Prisma-SASE-API-Service-Account

possible ways to add this Service Account to PAN-OS-PHP:

• pan-os-php type=key-manager add=tsg_id{{TSG_ID}} 'apikey={{CLIENT_ID}}%{{CLIENT_SECRET}}'

character '%' must be used as separator between client_id and client_secret

or use any of the available UTIL:

• pan-os-php type=address in=sase-api://{{tsg_id}}

there is a client_id / client_secret prompt implemented

---

Right now the following PAN-OS-PHP util types are implemented:

useable with all actions / filter: [use listactions / listfilters to get more information about the existing once]

• pan-os-php type=address in=sase-api://{{tsg_id}} location=any
• pan-os-php type=service in=sase-api://{{tsg_id}} location=any
• pan-os-php type=tag in=sase-api://{{tsg_id}} location=any

only available with 'actions=display'

• pan-os-php type=rule ruletype=security in=sase-api://{{tsg_id}} location=any
• pan-os-php type=schedule in=sase-api://{{tsg_id}} location=any

---

partial config extraction

• pan-os-php type=upload in=sase-api://{{tsg_id}} out=cloudmangement.xml

---

---

PRE-ALPHA

• pan-os-php type=address-merger in=sase-api://{{tsg_id}} location=any allowmergingwithupperlevel exportcsv=adr-merger.html projectfolder=/share
• pan-os-php type=service-merger in=sase-api://{{tsg_id}} location=any allowmergingwithupperlevel exportcsv=srv-merger.html projectfolder=/share
• pan-os-php type=tag-merger in=sase-api://{{tsg_id}} location=any allowmergingwithupperlevel exportcsv=tag-merger.html projectfolder=/share