Palo Alto Networks - Prisma SASE

Provides commands for interaction with Prisma SASE API.

Network Security · Palo Alto Networks - Strata Cloud Manager

Details

ID	`Palo Alto Networks - Prisma SASE`
Provider	Palo Alto Networks
Category	Network Security
From Version	6.5.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix Cloud Runtime Security Cloud Posture Security XSIAM EDR Cortex Cloud

README

Provides commands for interaction with Prisma SASE API.
This integration was integrated and tested with version v1 of Palo Alto Networks - Prisma SASE

Configure Palo Alto Networks - Strata Cloud Manager in Cortex

Parameter	Description	Required
Server URL		True
API Client ID		True
API Client Secret		True
Tenant Services Group ID	Default Tenant Services Group ID to use for API calls. Example: 1234567890.	True
Trust any certificate (not secure)		False
Use system proxy settings		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

prisma-sase-security-rule-create

Create a new security rule.

Base Command

prisma-sase-security-rule-create

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
position	Rule position. Possible values are: pre, post. Default is pre.	Optional
name	The name of the security rule.	Required
action	Rule action. Possible values are: deny, allow, drop, reset-client, reset-server, reset-both.	Required
description	The security rule’s description.	Optional
log_setting	Rule log setting.	Optional
application	A comma-separated list of applications. Default is any.	Optional
category	A comma-separated list of categories. You can get category values by running the prisma-sase-custom-url-category-list command. Default is any.	Optional
destination	A comma-separated list of destination networks. Default is any.	Optional
destination_hip	A comma-separated list of destination HIPs.	Optional
profile_setting	Security profiles to apply to the traffic.	Optional
service	Services the rule applies to. Default is any.	Optional
source	A comma-separated list of source networks. Default is any.	Optional
source_hip	A comma-separated list of source HIPs.	Optional
source_user	A semi-colon (;) separated list of source users or groups. Default is any.	Optional
tag	A comma-separated list of rule tags.	Optional
from	A comma-separated list of source zones. Default is any.	Optional
to	A comma-separated list of destination zones. Default is any.	Optional
disabled	Whether the rule is disabled.	Optional
negate_source	Negate the source.	Optional
negate_destination	Negate the destination.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.SecurityRule	String	Created security rule.
PrismaSase.SecurityRule.action	String	Security rule action.
PrismaSase.SecurityRule.application	String	Security rule application.
PrismaSase.SecurityRule.category	String	Security rule category.
PrismaSase.SecurityRule.description	String	Security rule description.
PrismaSase.SecurityRule.destination	String	Security rule destination.
PrismaSase.SecurityRule.folder	String	Security rule folder.
PrismaSase.SecurityRule.from	String	Security rule from field (source zone(s)).
PrismaSase.SecurityRule.id	String	Security rule ID.
PrismaSase.SecurityRule.name	String	Security rule name.
PrismaSase.SecurityRule.position	String	Security rule position.
PrismaSase.SecurityRule.profile_setting.group	String	Security rule group.
PrismaSase.SecurityRule.service	String	Security rule service.
PrismaSase.SecurityRule.source	String	Security rule source.
PrismaSase.SecurityRule.source_user	String	Security rule source user.
PrismaSase.SecurityRule.to	String	Security rule to field (destination zone(s)).

Command example

!prisma-sase-security-rule-create name="somename11" action="allow"

Context Example

{
    "PrismaSase": {
        "SecurityRule": {
            "action": "allow",
            "application": [
                "any"
            ],
            "category": [
                "any"
            ],
            "destination": [
                "any"
            ],
            "folder": "Shared",
            "from": [
                "any"
            ],
            "id": "Id",
            "name": "somename11",
            "position": "pre",
            "service": [
                "any"
            ],
            "source": [
                "any"
            ],
            "source_user": [
                "any"
            ],
            "to": [
                "any"
            ]
        }
    }
}

Human Readable Output

Security Rule Created

Action Application Category Destination Folder From Id Name Position Service Source Source User To

allow any any any Shared any Id somename11 pre any any any any

Action	Application	Category	Destination	Folder	From	Id	Name	Position	Service	Source	Source User	To
allow	any	any	any	Shared	any	Id	somename11	pre	any	any	any	any

prisma-sase-security-rule-list

Lists all security rules.

Base Command

prisma-sase-security-rule-list

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
position	Security rule position. Possible values are: pre, post. Default is pre.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
rule_id	A specific security rule to return. If not specified, all security rules will be returned.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.SecurityRule	String	Found security rule.
PrismaSase.SecurityRule.action	String	Security rule action.
PrismaSase.SecurityRule.application	String	Security rule application.
PrismaSase.SecurityRule.category	String	Security rule category.
PrismaSase.SecurityRule.description	String	Security rule description.
PrismaSase.SecurityRule.destination	String	Security rule destination.
PrismaSase.SecurityRule.folder	String	Security rule folder.
PrismaSase.SecurityRule.from	String	Security rule from field (source zone(s)).
PrismaSase.SecurityRule.id	String	Security rule ID.
PrismaSase.SecurityRule.log_setting	String	Security rule log setting.
PrismaSase.SecurityRule.name	String	Security rule name.
PrismaSase.SecurityRule.position	String	Security rule position.
PrismaSase.SecurityRule.service	String	Security rule service.
PrismaSase.SecurityRule.source	String	Security rule source.
PrismaSase.SecurityRule.source_user	String	Security rule source user.
PrismaSase.SecurityRule.tag	String	Security rule tag.
PrismaSase.SecurityRule.to	String	Security rule to field (destination zone(s)).
PrismaSase.SecurityRule.negate_destination	Boolean	Security rule negate destination.

Command example

!prisma-sase-security-rule-list limit=1

Context Example

{
    "PrismaSase": {
        "SecurityRule": {
            "action": "drop",
            "application": [
                "any"
            ],
            "category": [
                "any"
            ],
            "description": "Rule to block",
            "destination": [
                "panw-highrisk-ip-list"
            ],
            "folder": "Shared",
            "from": [
                "any"
            ],
            "id": "Id",
            "log_setting": "Cortex Data Lake",
            "name": "name",
            "negate_destination": false,
            "position": "pre",
            "service": [
                "any"
            ],
            "source": [
                "any"
            ],
            "source_user": [
                "any"
            ],
            "tag": [
                "best-practice"
            ],
            "to": [
                "any"
            ]
        }
    }
}

Human Readable Output

Security Rules

Id Name Description Action Destination Folder

Id Name Rule to block drop panw-highrisk-ip-list Shared

Id	Name	Description	Action	Destination	Folder
Id	Name	Rule to block	drop	panw-highrisk-ip-list	Shared

prisma-sase-candidate-config-push

Push the candidate configuration.

Base Command

prisma-sase-candidate-config-push

Input

Argument Name	Description	Required
folders	Comma-separated list of targets (Remote Networks, Mobile Users, Service Connections).	Required
description	Configuration push job description.	Optional
interval_in_seconds	interval for polling command. Default is 30.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.CandidateConfig.job_id	String	Configuration job ID.
PrismaSase.CandidateConfig.result	String	The configuration push result, e.g. OK, FAIL.
PrismaSase.CandidateConfig.details	String	The configuration push details.

Command example

!prisma-sase-candidate-config-push folders="Mobile Users"

Human Readable Output

Waiting for all data to push for job id 201

prisma-sase-security-rule-update

Update an existing security rule.

Base Command

prisma-sase-security-rule-update

Input

Argument Name	Description	Required
rule_id	ID of the rule to be changed.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
position	Security rule position. Possible values are: pre, post. Default is pre.	Optional
action	Rule action. Possible values are: deny, allow, drop, reset-client, reset-server, reset-both.	Optional
description	The security rule’s description.	Optional
log_setting	Rule log setting.	Optional
application	A comma-separated list of applications.	Optional
category	A comma-separated list of categories.	Optional
destination	A comma-separated list of destination networks.	Optional
destination_hip	A comma-separated list of destination HIPs.	Optional
profile_setting	Security profiles to apply to the traffic.	Optional
service	Services the rule applies to.	Optional
source	A comma-separated list of source networks.	Optional
source_hip	A comma-separated list of source HIPs.	Optional
source_user	A semi-colon (;) separated list of source user(s).	Optional
tag	A comma-separated list of rule tags.	Optional
from	A comma-separated list of source zones.	Optional
to	A comma-separated list of destination zones.	Optional
disabled	Whether the rule is disabled.	Optional
negate_source	Negate source.	Optional
negate_destination	Negate the destination.	Optional
overwrite	Whether to overwrite the original rule values. Possible values are: true, false. Default is false.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.SecurityRule	String	Edited security rule.
PrismaSase.SecurityRule.action	String	Security rule action.
PrismaSase.SecurityRule.application	String	Security rule application.
PrismaSase.SecurityRule.category	String	Security rule category.
PrismaSase.SecurityRule.description	String	Security rule description.
PrismaSase.SecurityRule.destination	String	Security rule destination.
PrismaSase.SecurityRule.folder	String	Security rule folder.
PrismaSase.SecurityRule.from	String	Security rule from field (source zone(s)).
PrismaSase.SecurityRule.id	String	Security rule ID.
PrismaSase.SecurityRule.name	String	Security rule name.
PrismaSase.SecurityRule.profile_setting.group	String	Security rule profile setting.
PrismaSase.SecurityRule.service	String	Security rule service.
PrismaSase.SecurityRule.source	String	Security rule source.
PrismaSase.SecurityRule.source_user	String	Security rule source user.
PrismaSase.SecurityRule.to	String	Security rule to field (destination zone(s)).

Command example

!prisma-sase-security-rule-update rule_id="Id" position="pre" action="deny"

Context Example

{
    "PrismaSase": {
        "SecurityRule": {
            "action": "deny",
            "application": [
                "any"
            ],
            "category": [
                "test"
            ],
            "description": "test",
            "destination": [
                "any"
            ],
            "folder": "Shared",
            "from": [
                "any"
            ],
            "id": "Id",
            "name": "somename",
            "position": "pre",
            "service": [
                "any"
            ],
            "source": [
                "any"
            ],
            "source_user": [
                "any"
            ],
            "to": [
                "any"
            ]
        }
    }
}

Human Readable Output

Security Rule Updated

Action Application Category Description Destination Folder From Id Name Position Service Source Source User To

deny any test test any Shared any Id name pre any any any any

Action	Application	Category	Description	Destination	Folder	From	Id	Name	Position	Service	Source	Source User	To
deny	any	test	test	any	Shared	any	Id	name	pre	any	any	any	any

prisma-sase-address-object-update

Update an existing address object.

Base Command

prisma-sase-address-object-update

Input

Argument Name	Description	Required
object_id	ID of the address object to edit.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
description	The address object’s description.	Optional
type	The type of the address. Possible values are: ip_netmask, ip_range, ip_wildcard, fqdn.	Optional
address_value	The address value (should match the type).	Required
tag	A comma-separated list of address object tags.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Address.description	String	Address description.
PrismaSase.Address.folder	String	Address folder.
PrismaSase.Address.id	String	Address ID.
PrismaSase.Address.address_value	String	Address value.
PrismaSase.Address.type	String	Address type.
PrismaSase.Address.name	String	Address name.

Command example

!prisma-sase-address-object-update object_id="Id" address_value="8.8.8.4/32"

Context Example

{
    "PrismaSase": {
        "Address": {
            "address_value": "8.8.8.4/32",
            "folder": "Shared",
            "id": "Id",
            "name": "name",
            "type": "ip_netmask"
        }
    }
}

Human Readable Output

Address Object updated

Address Value Folder Id Name Type

8.8.8.4/32 Shared Id name ip_netmask

Address Value	Folder	Id	Name	Type
8.8.8.4/32	Shared	Id	name	ip_netmask

prisma-sase-config-job-list

Lists all configuration jobs.

Base Command

prisma-sase-config-job-list

Input

Argument Name	Description	Required
job_id	A specific config job to return. If not specified, all config jobs will be returned.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.ConfigJob.description	String	Configuration job description.
PrismaSase.ConfigJob.end_ts	Date	Configuration job end timestamp.
PrismaSase.ConfigJob.id	String	Configuration job ID.
PrismaSase.ConfigJob.job_result	String	Configuration job result.
PrismaSase.ConfigJob.job_status	String	Configuration job status.
PrismaSase.ConfigJob.job_type	String	Configuration job type.
PrismaSase.ConfigJob.parent_id	String	Configuration job parent ID.
PrismaSase.ConfigJob.percent	String	Configuration job percent.
PrismaSase.ConfigJob.result_str	String	Configuration job result string.
PrismaSase.ConfigJob.start_ts	Date	Configuration job start timestamp.
PrismaSase.ConfigJob.status_str	String	Configuration job status string.
PrismaSase.ConfigJob.summary	String	Configuration job summary.
PrismaSase.ConfigJob.type_str	String	Configuration job type string.
PrismaSase.ConfigJob.uname	String	Configuration job uname.

prisma-sase-security-rule-delete

Delete a specific security rule.

Base Command

prisma-sase-security-rule-delete

Input

Argument Name	Description	Required
rule_id	Rule ID of the rule to be deleted.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-security-rule-delete rule_id="Id"

Human Readable Output

Security Rule object with id Id and name name was deleted successfully

prisma-sase-address-object-create

Create a new address object.

Base Command

prisma-sase-address-object-create

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
name	The name of the address object.	Required
description	The address object’s description.	Optional
type	The type of the address. Possible values are: ip_netmask, ip_range, ip_wildcard, fqdn.	Required
tag	A comma-separated list of address object tags.	Optional
address_value	The address value (should match the type).	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Address	String	Created address object.
PrismaSase.Address.description	String	Address description.
PrismaSase.Address.folder	String	Address folder.
PrismaSase.Address.id	String	Address ID.
PrismaSase.Address.type	String	Address type.
PrismaSase.Address.address_value	String	Address value.
PrismaSase.Address.name	String	Address name.

Command example

!prisma-sase-address-object-create name="somename11" type="ip_netmask" address_value="8.8.8.8/32"

Context Example

{
    "PrismaSase": {
        "Address": {
            "address_value": "8.8.8.8/32",
            "folder": "Shared",
            "id": "id",
            "name": "somename11",
            "type": "ip_netmask"
        }
    }
}

Human Readable Output

Address Object Created

Address Value Folder Id Name Type

8.8.8.8/32 Shared Id somename11 ip_netmask

Address Value	Folder	Id	Name	Type
8.8.8.8/32	Shared	Id	somename11	ip_netmask

prisma-sase-address-object-delete

Delete a specific address object.

Base Command

prisma-sase-address-object-delete

Input

Argument Name	Description	Required
object_id	ID of the address object to delete.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-address-object-delete object_id="Id"

Human Readable Output

Address object with id Id and name name was deleted successfully

prisma-sase-address-object-list

Lists all addresses objects.

Base Command

prisma-sase-address-object-list

Input

Argument Name	Description	Required
object_id	The specific address object to return. If not specified, all addresses will be returned.	Optional
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Address.description	String	Address description.
PrismaSase.Address.folder	String	Address folder.
PrismaSase.Address.id	String	Address ID.
PrismaSase.Address.name	String	Address name.
PrismaSase.Address.address_value	String	Address value.
PrismaSase.Address.type	String	Address type.

Command example

!prisma-sase-address-object-list limit=1

Context Example

{
    "PrismaSase": {
        "Address": {
            "address_value": "test.com",
            "description": "description",
            "folder": "Shared",
            "id": "Id",
            "name": "name",
            "type": "fqdn"
        }
    }
}

Human Readable Output

Address Objects

Id Name Description Type Address Value Tag

Id Palo Alto Networks Sinkhole Palo Alto Networks fqdn test.com

Id	Name	Description	Type	Address Value	Tag
Id	Palo Alto Networks Sinkhole	Palo Alto Networks	fqdn	test.com

prisma-sase-tag-list

Lists all tags.

Base Command

prisma-sase-tag-list

Input

Argument Name	Description	Required
tag_id	A specific tag to return. If not specified, all tags will be returned.	Optional
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Tag.id	String	Tag ID.
PrismaSase.Tag.name	String	Tag name.
PrismaSase.Tag.folder	String	Tag folder.
PrismaSase.Tag.comments	String	Tag comments.
PrismaSase.Tag.color	String	The tag color.

Command example

!prisma-sase-tag-list limit=1

Context Example

{
    "PrismaSase": {
        "Tag": {
            "color": "Olive",
            "folder": "predefined",
            "name": "Sanctioned"
        }
    }
}

Human Readable Output

Tags

Id Name Folder Color Comments

Id test predefined Olive

Id	Name	Folder	Color	Comments
Id	test	predefined	Olive

prisma-sase-tag-create

Create a new tag.

Base Command

prisma-sase-tag-create

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
name	The tag unique name.	Required
color	Tag color. Possible values are: Red, Green, Blue, Yellow, Copper, Orange, Purple, Gray, Light Green, Cyan, Light Gray, Blue Gray, Lime, Black, Gold, Brown, Olive, Maroon, Red-Orange, Yellow-Orange, Forest Green, Turquoise Blue, Azure Blue, Cerulean Blue, Midnight Blue, Medium Blue, Cobalt Blue, Violet Blue, Blue Violet, Medium Violet, Medium Rose, Lavender, Orchid, Thistle, Peach, Salmon, Magenta, Red Violet, Mahogany, Burnt Sienna, Chestnut.	Optional
comments	Tag comments.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Tag.id	String	The tag ID.
PrismaSase.Tag.name	String	The tag name.
PrismaSase.Tag.folder	String	The tag folder.
PrismaSase.Tag.color	String	The tag color.
PrismaSase.Tag.comments	String	The tag comments.

Command example

!prisma-sase-tag-create name="somename11" color="Azure Blue"

Context Example

{
    "PrismaSase": {
        "Tag": {
            "color": "Azure Blue",
            "folder": "Shared",
            "id": "Id",
            "name": "somename11"
        }
    }
}

Human Readable Output

Address Object Created

Color Folder Id Name

Azure Blue Shared Id somename11

Color	Folder	Id	Name
Azure Blue	Shared	Id	somename11

prisma-sase-tag-update

Update an existing tag.

Base Command

prisma-sase-tag-update

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
tag_id	The tag ID.	Required
color	Tag color. Possible values are: Red, Green, Blue, Yellow, Copper, Orange, Purple, Gray, Light Green, Cyan, Light Gray, Blue Gray, Lime, Black, Gold, Brown, Olive, Maroon, Red-Orange, Yellow-Orange, Forest Green, Turquoise Blue, Azure Blue, Cerulean Blue, Midnight Blue, Medium Blue, Cobalt Blue, Violet Blue, Blue Violet, Medium Violet, Medium Rose, Lavender, Orchid, Thistle, Peach, Salmon, Magenta, Red Violet, Mahogany, Burnt Sienna, Chestnut.	Optional
comments	Tag comments.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.Tag.id	String	The tag ID.
PrismaSase.Tag.name	String	The tag name.
PrismaSase.Tag.folder	String	The tag folder.
PrismaSase.Tag.color	String	The tag color.
PrismaSase.Tag.comments	String	The tag comments.

Command example

!prisma-sase-tag-update tag_id="Id" color="Black"

Context Example

{
    "PrismaSase": {
        "Tag": {
            "color": "Black",
            "folder": "Shared",
            "id": "Id",
            "name": "somename"
        }
    }
}

Human Readable Output

Tag Edited

Color Folder Id Name

Black Shared Id somename

Color	Folder	Id	Name
Black	Shared	Id	somename

prisma-sase-tag-delete

Delete a specific tag.

Base Command

prisma-sase-tag-delete

Input

Argument Name	Description	Required
tag_id	The specific tag to delete.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-tag-delete tag_id="Id"

Human Readable Output

Tag with id Id and name somename was deleted successfully

prisma-sase-address-group-list

Lists all address groups.

Base Command

prisma-sase-address-group-list

Input

Argument Name	Description	Required
group_id	A specific address group to return. If not specified, all address groups will be returned.	Optional
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.AddressGroup.id	String	The address group ID.
PrismaSase.AddressGroup.name	String	The address group name.
PrismaSase.AddressGroup.description	String	The address group description.
PrismaSase.AddressGroup.addresses	String	The address group addresses.
PrismaSase.AddressGroup.dynamic_filter	String	The address group filter.

Command example

!prisma-sase-address-group-list limit=1

Context Example

{
    "PrismaSase": {
        "AddressGroup": {
            "description": "test",
            "dynamic_filter": "'test' or 'test1' and 'best-practice'",
            "folder": "Shared",
            "id": "Id",
            "name": "Test"
        }
    }
}

Human Readable Output

Address Groups

Id Name Description Addresses Dynamic Filter

Id Moishy_Test test ‘test’ or ‘test1’ and ‘best-practice’

Id	Name	Description	Addresses	Dynamic Filter
Id	Moishy_Test	test		‘test’ or ‘test1’ and ‘best-practice’

prisma-sase-address-group-create

Create a new address group.

Base Command

prisma-sase-address-group-create

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
type	The address group type. Possible values are: static, dynamic.	Required
static_addresses	Static addresses for the address group. If the type is static, a value must be provided.	Optional
dynamic_filter	Dynamic filter for the address group. If the type is dynamic, a value must be provided.	Optional
description	The address group’s description.	Optional
name	The name of the address group.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.AddressGroup.id	String	The address group ID.
PrismaSase.AddressGroup.name	String	The address group name.
PrismaSase.AddressGroup.folder	String	The address group folder.
PrismaSase.AddressGroup.description	String	The address group description.
PrismaSase.AddressGroup.addresses	String	The address group addresses.
PrismaSase.AddressGroup.dynamic_filter	String	The address group filter.

Command example

!prisma-sase-address-group-create name="somename" dynamic_filter="test" overwrite="false"

Context Example

{
    "PrismaSase": {
        "AddressGroup": {
            "dynamic_filter": "test",
            "folder": "Shared",
            "id": "Id",
            "name": "somename"
        }
    }
}

Human Readable Output

Address Group created

Dynamic Filter Folder Id Name

test Shared Id somename

Dynamic Filter	Folder	Id	Name
test	Shared	Id	somename

prisma-sase-address-group-update

Update an existing address group.

Base Command

prisma-sase-address-group-update

Input

Argument Name	Description	Required
group_id	The id of the address group.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
static_addresses	Static addresses for the address group. If the type is static, a value must be provided.	Optional
dynamic_filter	Dynamic filter for the address group. If the type is dynamic, a value must be provided.	Optional
overwrite	Whether to overwrite the original address group values. Possible values are: true, false. Default is false.	Optional
description	The address group’s description.	Optional
type	The address group type. Possible values are: dynamic, static.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.AddressGroup.id	String	The address group ID.
PrismaSase.AddressGroup.name	String	The address group name.
PrismaSase.AddressGroup.folder	String	The address group folder.
PrismaSase.AddressGroup.description	String	The address group description.
PrismaSase.AddressGroup.addresses	String	The address group addresses.
PrismaSase.AddressGroup.dynamic_filter	String	The address group filter.

Command example

!prisma-sase-address-group-update group_id="Id" dynamic_filter="and 'test2'" overwrite="false"

Context Example

{
    "PrismaSase": {
        "AddressGroup": {
            "dynamic_filter": "test and test2",
            "folder": "Shared",
            "id": "Id",
            "name": "somename"
        }
    }
}

Human Readable Output

Address Group updated

Dynamic Filter Folder Id Name

test and test2 Shared Id somename

Dynamic Filter	Folder	Id	Name
test and test2	Shared	Id	somename

prisma-sase-address-group-delete

Delete a specific address group.

Base Command

prisma-sase-address-group-delete

Input

Argument Name	Description	Required
group_id	The name of the address group.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-address-group-delete group_id="Id"

Human Readable Output

Address group with id Id and name somename was deleted successfully

prisma-sase-custom-url-category-list

Lists all custom URL categories.

Base Command

prisma-sase-custom-url-category-list

Input

Argument Name	Description	Required
id	A specific url category to return. If not specified, all url categories will be returned.	Optional
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.CustomURLCategory.id	String	The URL category ID.
PrismaSase.CustomURLCategory.name	String	The URL category name.
PrismaSase.CustomURLCategory.folder	String	The URL category folder.
PrismaSase.CustomURLCategory.type	String	The URL category type.
PrismaSase.CustomURLCategory.list	String	The URL category match list.
PrismaSase.CustomURLCategory.description	String	The URL category description.

Command example

!prisma-sase-custom-url-category-list limit=1

Context Example

{
    "PrismaSase": {
        "CustomURLCategory": {
            "folder": "Shared",
            "id": "Id",
            "list": [
                "www.test.com",
                "www.test2.com"
            ],
            "name": "name",
            "type": "URL List"
        }
    }
}

Human Readable Output

Custom Url Categories

Id Name Folder Type List

Id name Shared URL List www.test2.com,
www.test.com

Id	Name	Folder	Type	List
Id	name	Shared	URL List	www.test2.com, www.test.com

prisma-sase-custom-url-category-create

Create a new URL category.

Base Command

prisma-sase-custom-url-category-create

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
type	The custom URL category’s type. Possible values are: URL List, Category Match.	Required
value	If the type is URL List, the value will be a comma-separated array of URL addresses. If the type is Category Match, the value will be a comma-separated array of category names. You can get the names by running the prisma-sase-url-access-profile-list command.	Required
description	The custom URL category’s description.	Optional
name	The name of the custom URL category.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.CustomURLCategory.id	String	The URL category ID.
PrismaSase.CustomURLCategory.name	String	The URL category name.
PrismaSase.CustomURLCategory.folder	String	The URL category folder.
PrismaSase.CustomURLCategory.type	String	The URL category type.
PrismaSase.CustomURLCategory.list	String	The URL category match list.
PrismaSase.CustomURLCategory.description	String	The URL category description.

Command example

!prisma-sase-custom-url-category-create type="Category Match" value="low-risk" name="somename11"

Context Example

{
    "PrismaSase": {
        "CustomURLCategory": {
            "folder": "Shared",
            "id": "id",
            "list": [
                "low-risk"
            ],
            "name": "somename11",
            "type": "Category Match"
        }
    }
}

Human Readable Output

Custom URrl Category Created

Folder Id List Name Type

Shared Id low-risk somename11 Category Match

prisma-sase-custom-url-category-update

Update an existing url category.

Base Command

prisma-sase-custom-url-category-update

Input

Argument Name	Description	Required
id	The custom URL category id.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
value	The custom URL category’s value.	Optional
overwrite	Whether to overwrite the original custom URL category values. Possible values are: true, false. Default is false.	Optional
description	The custom URL category’s description.	Optional
type	The custom URL category’s type. Possible values are: URL List, Category Match.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.CustomURLCategory.id	String	The URL category ID.
PrismaSase.CustomURLCategory.name	String	The URL category name.
PrismaSase.CustomURLCategory.folder	String	The URL category folder.
PrismaSase.CustomURLCategory.type	String	The URL category type.
PrismaSase.CustomURLCategory.list	String	The URL category match list.
PrismaSase.CustomURLCategory.description	String	The URL category description.

Command example

!prisma-sase-custom-url-category-update id="Id" value="high-risk" overwrite="false"

Context Example

{
    "PrismaSase": {
        "CustomURLCategory": {
            "folder": "Shared",
            "id": "Id",
            "list": [
                "low-risk",
                "high-risk"
            ],
            "name": "somename",
            "type": "Category Match"
        }
    }
}

Human Readable Output

Custom Url Category updated

Folder Id List Name Type

Shared Id low-risk,
high-risk somename Category Match

prisma-sase-custom-url-category-delete

Delete a specific url category.

Base Command

prisma-sase-custom-url-category-delete

Input

Argument Name	Description	Required
id	The custom URL category id.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-custom-url-category-delete id="Id"

Human Readable Output

Custom Url Category with id Id and name somename was deleted successfully

prisma-sase-external-dynamic-list-list

Lists all external dynamic lists.

Base Command

prisma-sase-external-dynamic-list-list

Input

Argument Name	Description	Required
id	A specific external dynamic list to return. If not specified, all external dynamic lists will be returned.	Optional
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
limit	The maximum number of results to return. Default is 50.	Optional
page	Page number you would like to view. Each page contains page_size values. Must be used along with page_size.	Optional
page_size	Number of results per page to display.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.ExternalDynamicList.id	String	The external dynamic list ID.
PrismaSase.ExternalDynamicList.name	String	The external dynamic list name.
PrismaSase.ExternalDynamicList.folder	String	The external dynamic list folder.
PrismaSase.ExternalDynamicList.description	String	The external dynamic list description.
PrismaSase.ExternalDynamicList.type	String	The external dynamic list type.
PrismaSase.ExternalDynamicList.source	String	The external dynamic list source.
PrismaSase.ExternalDynamicList.frequency	String	The external dynamic list frequency.

Command example

!prisma-sase-external-dynamic-list-list limit=1

Context Example

{
    "PrismaSase": {
        "ExternalDynamicList": {
            "description": "description",
            "display_name": "display name",
            "folder": "predefined",
            "name": "panw-known-ip-list",
            "source": "predefined",
            "type": "predefined"
        }
    }
}

Human Readable Output

External Dynamic Lists

Id Name Type Folder Description Source Frequency

panw-known-ip-list predefined predefined description predefined

prisma-sase-external-dynamic-list-create

Create a new dynamic list.

Base Command

prisma-sase-external-dynamic-list-create

Input

Argument Name	Description	Required
name	The external dynamic list name.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
description	The dynamic list’s description.	Optional
type	The dynamic list’s type. Possible values are: predefined_ip, predefined_url, ip, domain, url.	Required
predefined_ip_list	The predefined IP list. If the type is predefined_ip, a value must be provided. Possible values are: panw-torexit-ip-list, panw-bulletproof-ip-list, panw-highrisk-ip-list, panw-known-ip-list.	Optional
predefined_url_list	The predefined URL list. If the type is predefined_url, a value must be provided. Possible values are: panw–auth-portal-exclude-list.	Optional
source_url	The source URL. If the type is ip, url or domain, a value must be provided.	Optional
frequency	Frequency to check for updates. Possible values are: five_minute, hourly, daily, weekly, monthly.	Optional
frequency_hour	The frequency hour. If the frequency argument is daily, weekly or monthly, value must be provided. Possible values are 00-23.	Optional
day_of_week	The day of the week. If the frequency argument is weekly or monthly, a value must be provided. Possible values are: monday, tuesday, wednesday, thursday, friday, saturday, sunday.	Optional
day_of_month	The day of the month. If the frequency argument is monthly, a value must be provided. Possible values are between 1 and 31.	Optional
exception_list	The user can exclude certain addresses from the list depending on the type of list.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.ExternalDynamicList.id	String	The external dynamic list ID.
PrismaSase.ExternalDynamicList.name	String	The external dynamic list name.
PrismaSase.ExternalDynamicList.folder	String	The external dynamic list folder.
PrismaSase.ExternalDynamicList.description	String	The external dynamic list description.
PrismaSase.ExternalDynamicList.type	String	The external dynamic list type.
PrismaSase.ExternalDynamicList.source	String	The external dynamic list source.
PrismaSase.ExternalDynamicList.frequency	String	The external dynamic list frequency.

Command example

!prisma-sase-external-dynamic-list-create name="somename11" folder="Shared" type="predefined_ip" predefined_ip_list="panw-highrisk-ip-list"

Context Example

{
    "PrismaSase": {
        "ExternalDynamicList": {
            "description": null,
            "exception_list": null,
            "folder": "Shared",
            "frequency": null,
            "id": "Id",
            "name": "somename11",
            "source": "panw-highrisk-ip-list",
            "type": "predefined_ip"
        }
    }
}

Human Readable Output

External Dynamic List Created

Id Name Type Folder Description Source Frequency

Id somename11 predefined_ip Shared panw-highrisk-ip-list

Command example

!prisma-sase-external-dynamic-list-create name="somename111" folder="Shared" type="domain" source_url="test.com" frequency="monthly" frequency_hour="09" day_of_month="1"

Context Example

{
    "PrismaSase": {
        "ExternalDynamicList": {
            "description": null,
            "exception_list": null,
            "folder": "Shared",
            "frequency": {
                "monthly": {
                    "at": "09",
                    "day_of_month": 1
                }
            },
            "id": "Id",
            "name": "somename111",
            "source": "test.com",
            "type": "domain"
        }
    }
}

Human Readable Output

External Dynamic List Created

Id Name Type Folder Description Source Frequency

Id somename111 domain Shared test.com monthly:
at: 09
day_of_month: 1

prisma-sase-external-dynamic-list-update

Update an existing dynamic list.

Base Command

prisma-sase-external-dynamic-list-update

Input

Argument Name	Description	Required
id	The external dynamic list id.	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
overwrite	Whether to overwrite the external dynamic list values. Possible values are: true, false. Default is false.	Optional
description	The dynamic list’s description.	Optional
type	The dynamic list’s type. Possible values are: predefined_ip, predefined_url, ip, domain, url.	Optional
predefined_ip_list	The predefined ip list. If the type is predefined_ip, a value must be provided. Possible values are: panw-torexit-ip-list, panw-bulletproof-ip-list, panw-highrisk-ip-list, panw-known-ip-list.	Optional
predefined_url_list	The predefined URL list. If the type is predefined_url, a value must be provided. Possible values are: panw–auth-portal-exclude-list.	Optional
source_url	The source URL. If the type is ip, url or domain, a value must be provided.	Optional
frequency	Frequency to check for updates. Possible values are: five_minute, hourly, daily, weekly, monthly.	Optional
frequency_hour	The frequency hour.	Optional
day_of_week	The day of the week. Possible values are: monday, tuesday, wednesday, thursday, friday, saturday, sunday.	Optional
day_of_month	The day of the month. Possible values are between 1 and 31.	Optional
exception_list	The user can exclude certain addresses from the list depending on the type of list.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

Path	Type	Description
PrismaSase.ExternalDynamicList.id	String	The external dynamic list ID.
PrismaSase.ExternalDynamicList.name	String	The external dynamic list name.
PrismaSase.ExternalDynamicList.folder	String	The external dynamic list folder.
PrismaSase.ExternalDynamicList.description	String	The external dynamic list description.
PrismaSase.ExternalDynamicList.type	String	The external dynamic list type.
PrismaSase.ExternalDynamicList.source	String	The external dynamic list source.
PrismaSase.ExternalDynamicList.frequency	String	The external dynamic list frequency.

Command example

!prisma-sase-external-dynamic-list-update id'"Id"" predefined_ip_list="panw-lowrisk-ip-list"

Context Example

{
    "PrismaSase": {
        "ExternalDynamicList": {
            "description": null,
            "exception_list": null,
            "folder": "Shared",
            "frequency": null,
            "id": "Id",
            "name": "somename11",
            "source": "panw-lowrisk-ip-list",
            "type": "predefined_ip"
        }
    }
}

Human Readable Output

External Dynamic List Updated

Id Name Type Folder Description Source Frequency

Id somename11 predefined_ip Shared panw-lowrisk-ip-list

prisma-sase-external-dynamic-list-delete

Delete a specific dynamic list.

Base Command

prisma-sase-external-dynamic-list-delete

Input

Argument Name	Description	Required
id	The external dynamic list id.	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-external-dynamic-list-delete id="Id"

Human Readable Output

External Dynamic List with id Id and name name was deleted successfully

prisma-sase-url-category-list

Get all predefined URL categories.

Base Command

prisma-sase-url-category-list

Input

Argument Name	Description	Required
folder	The configuration folder group setting. Possible values are: Shared, Mobile Users, Remote Networks, Service Connections, Mobile Users Container, Mobile Users Explicit Proxy. Default is Shared.	Optional
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional

Context Output

There is no context output for this command.

Command example

!prisma-sase-url-category-list limit=1

Human Readable Output

URL categories

alert allow block continue override

recreation-and-hobbies,
educational-institutions,
real-estate,
web-advertisements,
health-and-medicine,
stock-advice-and-tools,
travel,
computer-and-internet-info,
personal-sites-and-blogs,
swimsuits-and-intimate-apparel,
social-networking,
religion,
medium-risk,
business-and-economy,
private-ip-addresses,
web-hosting,
entertainment-and-arts,
streaming-media,
abortion,
translation,
internet-portals,
online-storage-and-backup,
job-search,
motor-vehicles,
web-based-email,
nudity,
sports,
training-and-tools,
government,
shareware-and-freeware,
legal,
shopping,
alcohol-and-tobacco,
low-risk,
auctions,
high-risk,
search-engines,
cryptocurrency,
not-resolved,
society,
financial-services,
military,
news,
philosophy-and-political-advocacy,
content-delivery-networks,
internet-communications-and-telephony,
music,
home-and-garden,
hunting-and-fishing,
reference-and-research,
dating,
sex-education,
games hacking,
extremism,
weapons,
command-and-control,
ransomware,
copyright-infringement,
dynamic-dns,
parked,
phishing,
medium-risk,
unknown,
abused-drugs,
insufficient-content,
adult,
newly-registered-domain,
grayware,
high-risk,
gambling,
malware,
peer-to-peer,
proxy-avoidance-and-anonymizers,
questionable

prisma-sase-quarantine-host

Quarantine a host.

Base Command

prisma-sase-quarantine-host

Input

Argument Name	Description	Required
tsg_id	Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.	Optional
host_id	The host ID.	Required

Context Output

There is no context output for this command.

Command example

!prisma-sase-quarantine-host host_id="host_id"

Human Readable Output

Host Quarantined

host_id

test_host

prisma-sase-cie-user-get

Get the CIE user.

Base Command

prisma-sase-cie-user-get

Input

Argument Name	Description	Required
domain	The domain of the directory-sync connected to the CIE.	Required
value_for_filter	The attribute value for the filter.	Required
attributes_to_return	A comma-separated list of attributes to return. Default is Common-Name, Unique Identifier, Manager, User Principal Name, Name, Distinguished Name.	Optional
attributes_to_filter_by	A comma-separated list of attributes to filter by. Default is Distinguished Name, Unique Identifier, Common-Name, Name, User Principal Name.	Optional
operator	The operator. Possible values are: Equal, Starts With, Ends With, Contain, Text Search. Default is Equal.	Optional

Context Output

Path	Type	Description
PrismaSase.CIE.User.common_name	String	The common name.
PrismaSase.CIE.User.distinguished_name	String	The distinguished name.
PrismaSase.CIE.User.manager	String	The manager.
PrismaSase.CIE.User.name	String	The name.
PrismaSase.CIE.User.unique_identifier	String	The unique identifier.

Configuration parameters

url — Server URL (required)
credentials — API Client ID (required)
tsg_id — Tenant Services Group ID (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (29)

prisma-sase-address-group-create
Create a new address group.
prisma-sase-address-group-delete
Delete a specific address group.
prisma-sase-address-group-list
Lists all address groups.
prisma-sase-address-group-update
Update an existing address group.
prisma-sase-address-object-create
Create a new address object.
prisma-sase-address-object-delete
Delete a specific address object.
prisma-sase-address-object-list
Lists all addresses objects.
prisma-sase-address-object-update
Update an existing address object.
prisma-sase-candidate-config-push
Push the candidate configuration.
prisma-sase-cie-user-get
Get the CIE user.
prisma-sase-config-job-list
Lists all configuration jobs.
prisma-sase-custom-url-category-create
Create a new URL category.
prisma-sase-custom-url-category-delete
Delete a specific URL category.
prisma-sase-custom-url-category-list
Lists all custom URL categories.
prisma-sase-custom-url-category-update
Update an existing url category.
prisma-sase-external-dynamic-list-create
Create a new dynamic list.
prisma-sase-external-dynamic-list-delete
Delete a specific dynamic list.
prisma-sase-external-dynamic-list-list
Lists all external dynamic lists.
prisma-sase-external-dynamic-list-update
Update an existing dynamic list.
prisma-sase-quarantine-host
Quarantine a host.
prisma-sase-security-rule-create
Create a new security rule.
prisma-sase-security-rule-delete
Delete a specific security rule.
prisma-sase-security-rule-list
Lists all security rules.
prisma-sase-security-rule-update
Update an existing security rule.
prisma-sase-tag-create
Create a new tag.
prisma-sase-tag-delete
Delete a specific tag.
prisma-sase-tag-list
Lists all tags.
prisma-sase-tag-update
Update an existing tag.
prisma-sase-url-category-list
Get all predefined URL categories.

Source

PrismaSASE.py PrismaSASE_test.py PrismaSASE.yml PrismaSASE_description.md command_examples.txt

Download History Raw

category: Network Security
provider: Palo Alto Networks
commonfields:
  id: Palo Alto Networks - Prisma SASE
  version: -1
configuration:
- defaultvalue: https://api.sase.paloaltonetworks.com
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- display: API Client ID
  section: Connect
  name: credentials
  required: true
  type: 9
  displaypassword: API Client Secret
- additionalinfo: 'Default Tenant Services Group ID to use for API calls. Example: 1234567890.'
  display: Tenant Services Group ID
  name: tsg_id
  required: true
  type: 0
  section: Connect
- defaultvalue: 'false'
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: 'false'
  display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
description: Provides commands for interaction with Prisma SASE API.
display: Palo Alto Networks - Strata Cloud Manager
name: Palo Alto Networks - Prisma SASE
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      defaultValue: pre
      description: Rule position.
      name: position
      predefined:
      - pre
      - post
    - description: The name of the security rule.
      name: name
      required: true
    - auto: PREDEFINED
      description: Rule action.
      name: action
      predefined:
      - deny
      - allow
      - drop
      - reset-client
      - reset-server
      - reset-both
      required: true
    - description: The security rule's description.
      name: description
    - description: Rule log setting.
      name: log_setting
    - defaultValue: any
      description: A comma-separated list of applications.
      isArray: true
      name: application
    - defaultValue: any
      description: A comma-separated list of categories. You can get category values by running the prisma-sase-custom-url-category-list command.
      isArray: true
      name: category
    - defaultValue: any
      description: A comma-separated list of destination networks.
      isArray: true
      name: destination
    - description: A comma-separated list of destination HIPs.
      isArray: true
      name: destination_hip
    - description: Security profiles to apply to the traffic.
      name: profile_setting
    - defaultValue: any
      description: Services the rule applies to.
      name: service
    - defaultValue: any
      description: A comma-separated list of source networks.
      isArray: true
      name: source
    - description: A comma-separated list of source HIPs.
      isArray: true
      name: source_hip
    - defaultValue: any
      description: A semi-colon (;) separated list of source users or groups.
      isArray: true
      name: source_user
    - description: A comma-separated list of rule tags.
      isArray: true
      name: tag
    - defaultValue: any
      description: A comma-separated list of source zones.
      isArray: true
      name: from
    - defaultValue: any
      description: A comma-separated list of destination zones.
      isArray: true
      name: to
    - description: Whether the rule is disabled.
      name: disabled
    - description: Negate the source.
      name: negate_source
    - description: Negate the destination.
      name: negate_destination
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new security rule.
    name: prisma-sase-security-rule-create
    outputs:
    - contextPath: PrismaSase.SecurityRule
      description: Created security rule.
      type: String
    - contextPath: PrismaSase.SecurityRule.action
      description: Security rule action.
      type: String
    - contextPath: PrismaSase.SecurityRule.application
      description: Security rule application.
      type: String
    - contextPath: PrismaSase.SecurityRule.category
      description: Security rule category.
      type: String
    - contextPath: PrismaSase.SecurityRule.description
      description: Security rule description.
      type: String
    - contextPath: PrismaSase.SecurityRule.destination
      description: Security rule destination.
      type: String
    - contextPath: PrismaSase.SecurityRule.folder
      description: Security rule folder.
      type: String
    - contextPath: PrismaSase.SecurityRule.from
      description: Security rule from field (source zone(s)).
      type: String
    - contextPath: PrismaSase.SecurityRule.id
      description: Security rule ID.
      type: String
    - contextPath: PrismaSase.SecurityRule.name
      description: Security rule name.
      type: String
    - contextPath: PrismaSase.SecurityRule.position
      description: Security rule position.
      type: String
    - contextPath: PrismaSase.SecurityRule.profile_setting.group
      description: Security rule group.
      type: String
    - contextPath: PrismaSase.SecurityRule.service
      description: Security rule service.
      type: String
    - contextPath: PrismaSase.SecurityRule.source
      description: Security rule source.
      type: String
    - contextPath: PrismaSase.SecurityRule.source_user
      description: Security rule source user.
      type: String
    - contextPath: PrismaSase.SecurityRule.to
      description: Security rule to field (destination zone(s)).
      type: String
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - defaultValue: 'pre'
      description: Security rule position.
      name: position
      auto: PREDEFINED
      predefined:
      - pre
      - post
    - name: limit
      description: The maximum number of results to return.
      defaultValue: '50'
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - description: Number of results per page to display.
      name: page_size
    - description: A specific security rule to return. If not specified, all security rules will be returned.
      name: rule_id
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all security rules.
    name: prisma-sase-security-rule-list
    outputs:
    - contextPath: PrismaSase.SecurityRule
      description: Found security rule.
      type: String
    - contextPath: PrismaSase.SecurityRule.action
      description: Security rule action.
      type: String
    - contextPath: PrismaSase.SecurityRule.application
      description: Security rule application.
      type: String
    - contextPath: PrismaSase.SecurityRule.category
      description: Security rule category.
      type: String
    - contextPath: PrismaSase.SecurityRule.description
      description: Security rule description.
      type: String
    - contextPath: PrismaSase.SecurityRule.destination
      description: Security rule destination.
      type: String
    - contextPath: PrismaSase.SecurityRule.folder
      description: Security rule folder.
      type: String
    - contextPath: PrismaSase.SecurityRule.from
      description: Security rule from field (source zone(s)).
      type: String
    - contextPath: PrismaSase.SecurityRule.id
      description: Security rule ID.
      type: String
    - contextPath: PrismaSase.SecurityRule.log_setting
      description: Security rule log setting.
      type: String
    - contextPath: PrismaSase.SecurityRule.name
      description: Security rule name.
      type: String
    - contextPath: PrismaSase.SecurityRule.position
      description: Security rule position.
      type: String
    - contextPath: PrismaSase.SecurityRule.service
      description: Security rule service.
      type: String
    - contextPath: PrismaSase.SecurityRule.source
      description: Security rule source.
      type: String
    - contextPath: PrismaSase.SecurityRule.source_user
      description: Security rule source user.
      type: String
    - contextPath: PrismaSase.SecurityRule.tag
      description: Security rule tag.
      type: String
    - contextPath: PrismaSase.SecurityRule.to
      description: Security rule to field (destination zone(s)).
      type: String
    - contextPath: PrismaSase.SecurityRule.negate_destination
      description: Security rule negate destination.
      type: Boolean
  - arguments:
    - description: Comma-separated list of targets (Remote Networks, Mobile Users, Service Connections).
      name: folders
      required: true
    - description: Configuration push job description.
      name: description
    - description: interval for polling command. Default is 30.
      name: interval_in_seconds
    - description: Polling timeout in seconds.
      name: polling_timeout_in_seconds
      defaultValue: '600'
    - description: For polling use - the job ID of the push job.
      name: job_id
      deprecated: true
    - description: For polling use - whether the parent process finished and child processes were created.
      name: parent_finished
      deprecated: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Push the candidate configuration.
    name: prisma-sase-candidate-config-push
    polling: true
    outputs:
    - contextPath: PrismaSase.CandidateConfig.job_id
      description: Configuration job ID.
      type: String
    - contextPath: PrismaSase.CandidateConfig.result
      description: The configuration push result, e.g., OK, FAIL.
      type: String
    - contextPath: PrismaSase.CandidateConfig.details
      description: The configuration push details.
      type: String
  - arguments:
    - description: ID of the rule to be changed.
      name: rule_id
      required: true
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      defaultValue: pre
      description: Security rule position.
      name: position
      predefined:
      - pre
      - post
    - auto: PREDEFINED
      description: Rule action.
      name: action
      predefined:
      - deny
      - allow
      - drop
      - reset-client
      - reset-server
      - reset-both
    - description: The security rule's description.
      name: description
    - description: Rule log setting.
      name: log_setting
    - description: A comma-separated list of applications.
      isArray: true
      name: application
    - description: A comma-separated list of categories.
      isArray: true
      name: category
    - description: A comma-separated list of destination networks.
      isArray: true
      name: destination
    - description: A comma-separated list of destination HIPs.
      isArray: true
      name: destination_hip
    - description: Security profiles to apply to the traffic.
      name: profile_setting
    - description: Services the rule applies to.
      name: service
    - description: A comma-separated list of source networks.
      isArray: true
      name: source
    - description: A comma-separated list of source HIPs.
      isArray: true
      name: source_hip
    - description: A semi-colon (;) separated list of source user(s).
      name: source_user
    - description: A comma-separated list of rule tags.
      isArray: true
      name: tag
    - description: A comma-separated list of source zones.
      isArray: true
      name: from
    - description: A comma-separated list of destination zones.
      isArray: true
      name: to
    - description: Whether the rule is disabled.
      name: disabled
    - description: Negate source.
      name: negate_source
    - description: Negate the destination.
      name: negate_destination
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Whether to overwrite the original rule values.
      name: overwrite
      predefined:
      - 'true'
      - 'false'
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing security rule.
    name: prisma-sase-security-rule-update
    outputs:
    - contextPath: PrismaSase.SecurityRule
      description: Edited security rule.
      type: String
    - contextPath: PrismaSase.SecurityRule.action
      description: Security rule action.
      type: String
    - contextPath: PrismaSase.SecurityRule.application
      description: Security rule application.
      type: String
    - contextPath: PrismaSase.SecurityRule.category
      description: Security rule category.
      type: String
    - contextPath: PrismaSase.SecurityRule.description
      description: Security rule description.
      type: String
    - contextPath: PrismaSase.SecurityRule.destination
      description: Security rule destination.
      type: String
    - contextPath: PrismaSase.SecurityRule.folder
      description: Security rule folder.
      type: String
    - contextPath: PrismaSase.SecurityRule.from
      description: Security rule from field (source zone(s)).
      type: String
    - contextPath: PrismaSase.SecurityRule.id
      description: Security rule ID.
      type: String
    - contextPath: PrismaSase.SecurityRule.name
      description: Security rule name.
      type: String
    - contextPath: PrismaSase.SecurityRule.profile_setting.group
      description: Security rule profile setting.
      type: String
    - contextPath: PrismaSase.SecurityRule.service
      description: Security rule service.
      type: String
    - contextPath: PrismaSase.SecurityRule.source
      description: Security rule source.
      type: String
    - contextPath: PrismaSase.SecurityRule.source_user
      description: Security rule source user.
      type: String
    - contextPath: PrismaSase.SecurityRule.to
      description: Security rule to field (destination zone(s)).
      type: String
  - arguments:
    - description: ID of the address object to edit.
      name: object_id
      required: true
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - description: The address object's description.
      name: description
    - auto: PREDEFINED
      description: "The type of the address. \nThe optional types are: \nIP Netmask: IP address or a network using the slash notation - ip_address/mask.\nIP Range: Range of IP addresses using the notation ip_address-ip_address.\nIP Wildcard: IP wildcard address in the format of an IPv4 address followed by a slash and a mask.\nFQDN: Domain Name."
      name: type
      predefined:
      - ip_netmask
      - ip_range
      - ip_wildcard
      - fqdn
    - description: The address value (should match the type).
      name: address_value
      required: true
    - description: A comma-separated list of address object tags.
      isArray: true
      name: tag
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing address object.
    name: prisma-sase-address-object-update
    outputs:
    - contextPath: PrismaSase.Address.description
      description: Address description.
      type: String
    - contextPath: PrismaSase.Address.folder
      description: Address folder.
      type: String
    - contextPath: PrismaSase.Address.id
      description: Address ID.
      type: String
    - contextPath: PrismaSase.Address.address_value
      description: Address value.
      type: String
    - contextPath: PrismaSase.Address.type
      description: Address type.
      type: String
    - contextPath: PrismaSase.Address.name
      description: Address name.
      type: String
  - arguments:
    - description: A specific config job to return. If not specified, all config jobs will be returned.
      name: job_id
    - defaultValue: '50'
      description: The maximum number of results to return.
      name: limit
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - name: page_size
      description: Number of results per page to display.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all configuration jobs.
    name: prisma-sase-config-job-list
    outputs:
    - contextPath: PrismaSase.ConfigJob.description
      description: Configuration job description.
      type: String
    - contextPath: PrismaSase.ConfigJob.end_ts
      description: Configuration job end timestamp.
      type: Date
    - contextPath: PrismaSase.ConfigJob.id
      description: Configuration job ID.
      type: String
    - contextPath: PrismaSase.ConfigJob.job_result
      description: Configuration job result.
      type: String
    - contextPath: PrismaSase.ConfigJob.job_status
      description: Configuration job status.
      type: String
    - contextPath: PrismaSase.ConfigJob.job_type
      description: Configuration job type.
      type: String
    - contextPath: PrismaSase.ConfigJob.parent_id
      description: Configuration job parent ID.
      type: String
    - contextPath: PrismaSase.ConfigJob.percent
      description: Configuration job percent.
      type: String
    - contextPath: PrismaSase.ConfigJob.result_str
      description: Configuration job result string.
      type: String
    - contextPath: PrismaSase.ConfigJob.start_ts
      description: Configuration job start timestamp.
      type: Date
    - contextPath: PrismaSase.ConfigJob.status_str
      description: Configuration job status string.
      type: String
    - contextPath: PrismaSase.ConfigJob.summary
      description: Configuration job summary.
      type: String
    - contextPath: PrismaSase.ConfigJob.type_str
      description: Configuration job type string.
      type: String
    - contextPath: PrismaSase.ConfigJob.uname
      description: Configuration job uname.
      type: String
  - arguments:
    - description: Rule ID of the rule to be deleted.
      name: rule_id
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific security rule.
    name: prisma-sase-security-rule-delete
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - description: The name of the address object.
      name: name
      required: true
    - description: The address object's description.
      name: description
    - auto: PREDEFINED
      description: "The type of the address. \nThe optional types are: \nIP Netmask: IP address or a network using the slash notation - ip_address/mask.\nIP Range: Range of IP addresses using the notation ip_address-ip_address.\nIP Wildcard: IP wildcard address in the format of an IPv4 address followed by a slash and a mask.\nFQDN: Domain Name."
      name: type
      predefined:
      - ip_netmask
      - ip_range
      - ip_wildcard
      - fqdn
      required: true
    - description: A comma-separated list of address object tags.
      isArray: true
      name: tag
    - description: The address value (should match the type).
      name: address_value
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new address object.
    name: prisma-sase-address-object-create
    outputs:
    - contextPath: PrismaSase.Address
      description: Created address object.
      type: String
    - contextPath: PrismaSase.Address.description
      description: Address description.
      type: String
    - contextPath: PrismaSase.Address.folder
      description: Address folder.
      type: String
    - contextPath: PrismaSase.Address.id
      description: Address ID.
      type: String
    - contextPath: PrismaSase.Address.type
      description: Address type.
      type: String
    - contextPath: PrismaSase.Address.address_value
      description: Address value.
      type: String
    - contextPath: PrismaSase.Address.name
      description: Address name.
      type: String
  - arguments:
    - description: ID of the address object to delete.
      name: object_id
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific address object.
    name: prisma-sase-address-object-delete
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - description: The specific address object to return. If not specified, all addresses will be returned.
      name: object_id
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      defaultValue: '50'
      description: The maximum number of results to return.
      name: limit
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - name: page_size
      description: Number of results per page to display.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all addresses objects.
    name: prisma-sase-address-object-list
    outputs:
    - contextPath: PrismaSase.Address.description
      description: Address description.
      type: String
    - contextPath: PrismaSase.Address.folder
      description: Address folder.
      type: String
    - contextPath: PrismaSase.Address.id
      description: Address ID.
      type: String
    - contextPath: PrismaSase.Address.name
      description: Address name.
      type: String
    - contextPath: PrismaSase.Address.address_value
      description: Address value.
      type: String
    - contextPath: PrismaSase.Address.type
      description: Address type.
      type: String
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - description: A specific tag to return. If not specified, all tags will be returned.
      name: tag_id
    - defaultValue: 'Shared'
      description: The configuration folder group setting.
      name: folder
      auto: PREDEFINED
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: limit
      description: The maximum number of results to return.
      defaultValue: '50'
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - description: Number of results per page to display.
      name: page_size
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all tags.
    name: prisma-sase-tag-list
    outputs:
    - contextPath: PrismaSase.Tag.id
      description: Tag ID.
      type: String
    - contextPath: PrismaSase.Tag.name
      description: Tag name.
      type: String
    - contextPath: PrismaSase.Tag.folder
      description: Tag folder.
      type: String
    - contextPath: PrismaSase.Tag.comments
      description: Tag comments.
      type: String
    - contextPath: PrismaSase.Tag.color
      description: The tag color.
      type: String
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - description: The tag unique name.
      name: name
      required: true
    - auto: PREDEFINED
      description: Tag color.
      name: color
      predefined:
      - Red
      - Green
      - Blue
      - Yellow
      - Copper
      - Orange
      - Purple
      - Gray
      - Light Green
      - Cyan
      - Light Gray
      - Blue Gray
      - Lime
      - Black
      - Gold
      - Brown
      - Olive
      - Maroon
      - Red-Orange
      - Yellow-Orange
      - Forest Green
      - Turquoise Blue
      - Azure Blue
      - Cerulean Blue
      - Midnight Blue
      - Medium Blue
      - Cobalt Blue
      - Violet Blue
      - Blue Violet
      - Medium Violet
      - Medium Rose
      - Lavender
      - Orchid
      - Thistle
      - Peach
      - Salmon
      - Magenta
      - Red Violet
      - Mahogany
      - Burnt Sienna
      - Chestnut
    - description: Tag comments.
      name: comments
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new tag.
    name: prisma-sase-tag-create
    outputs:
    - contextPath: PrismaSase.Tag.id
      description: The tag ID.
      type: String
    - contextPath: PrismaSase.Tag.name
      description: The tag name.
      type: String
    - contextPath: PrismaSase.Tag.folder
      description: The tag folder.
      type: String
    - contextPath: PrismaSase.Tag.color
      description: The tag color.
      type: String
    - contextPath: PrismaSase.Tag.comments
      description: The tag comments.
      type: String
  - arguments:
    - auto: PREDEFINED
      description: The configuration folder group setting.
      defaultValue: Shared
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - description: The tag ID.
      name: tag_id
      required: true
    - auto: PREDEFINED
      description: Tag color.
      name: color
      predefined:
      - Red
      - Green
      - Blue
      - Yellow
      - Copper
      - Orange
      - Purple
      - Gray
      - Light Green
      - Cyan
      - Light Gray
      - Blue Gray
      - Lime
      - Black
      - Gold
      - Brown
      - Olive
      - Maroon
      - Red-Orange
      - Yellow-Orange
      - Forest Green
      - Turquoise Blue
      - Azure Blue
      - Cerulean Blue
      - Midnight Blue
      - Medium Blue
      - Cobalt Blue
      - Violet Blue
      - Blue Violet
      - Medium Violet
      - Medium Rose
      - Lavender
      - Orchid
      - Thistle
      - Peach
      - Salmon
      - Magenta
      - Red Violet
      - Mahogany
      - Burnt Sienna
      - Chestnut
    - description: Tag comments.
      name: comments
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing tag.
    name: prisma-sase-tag-update
    outputs:
    - contextPath: PrismaSase.Tag.id
      description: The tag ID.
      type: String
    - contextPath: PrismaSase.Tag.name
      description: The tag name.
      type: String
    - contextPath: PrismaSase.Tag.folder
      description: The tag folder.
      type: String
    - contextPath: PrismaSase.Tag.color
      description: The tag color.
      type: String
    - contextPath: PrismaSase.Tag.comments
      description: The tag comments.
      type: String
  - arguments:
    - description: The specific tag to delete.
      name: tag_id
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific tag.
    name: prisma-sase-tag-delete
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - description: A specific address group to return. If not specified, all address groups will be returned.
      name: group_id
    - name: folder
      description: The configuration folder group setting.
      auto: PREDEFINED
      defaultValue: Shared
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: limit
      description: The maximum number of results to return.
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - description: Number of results per page to display.
      name: page_size
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all address groups.
    name: prisma-sase-address-group-list
    outputs:
    - contextPath: PrismaSase.AddressGroup.id
      description: The address group ID.
      type: String
    - contextPath: PrismaSase.AddressGroup.name
      description: The address group name.
      type: String
    - contextPath: PrismaSase.AddressGroup.description
      description: The address group description.
      type: String
    - contextPath: PrismaSase.AddressGroup.addresses
      description: The address group addresses.
      type: String
    - contextPath: PrismaSase.AddressGroup.dynamic_filter
      description: The address group filter.
      type: String
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      description: The address group type.
      name: type
      predefined:
      - static
      - dynamic
      required: true
    - description: Static addresses for the address group. If the type is static, a value must be provided.
      name: static_addresses
    - description: Dynamic filter for the address group. If the type is dynamic, a value must be provided.
      name: dynamic_filter
    - name: description
      description: The address group's description.
    - name: name
      required: true
      description: The name of the address group.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new address group.
    name: prisma-sase-address-group-create
    outputs:
    - contextPath: PrismaSase.AddressGroup.id
      description: The address group ID.
      type: String
    - contextPath: PrismaSase.AddressGroup.name
      description: The address group name.
      type: String
    - contextPath: PrismaSase.AddressGroup.folder
      description: The address group folder.
      type: String
    - contextPath: PrismaSase.AddressGroup.description
      description: The address group description.
      type: String
    - contextPath: PrismaSase.AddressGroup.addresses
      description: The address group addresses.
      type: String
    - contextPath: PrismaSase.AddressGroup.dynamic_filter
      description: The address group filter.
      type: String
  - arguments:
    - name: group_id
      description: The ID of the address group.
      required: true
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: static_addresses
      description: Static addresses for the address group. If the type is static, a value must be provided.
    - name: dynamic_filter
      description: Dynamic filter for the address group. If the type is dynamic, a value must be provided.
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Rather to overwrite existing data.
      name: overwrite
      predefined:
      - 'true'
      - 'false'
    - name: description
      description: The address group's description.
    - auto: PREDEFINED
      name: type
      predefined:
      - dynamic
      - static
      description: The address group type.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing address group.
    name: prisma-sase-address-group-update
    outputs:
    - contextPath: PrismaSase.AddressGroup.id
      description: The address group ID.
      type: String
    - contextPath: PrismaSase.AddressGroup.name
      description: The address group name.
      type: String
    - contextPath: PrismaSase.AddressGroup.folder
      description: The address group folder.
      type: String
    - contextPath: PrismaSase.AddressGroup.description
      description: The address group description.
      type: String
    - contextPath: PrismaSase.AddressGroup.addresses
      description: The address group addresses.
      type: String
    - contextPath: PrismaSase.AddressGroup.dynamic_filter
      description: The address group filter.
      type: String
  - arguments:
    - name: group_id
      description: The name of the address group.
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific address group.
    name: prisma-sase-address-group-delete
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - description: A specific URL category to return. If not specified, all URL categories will be returned.
      name: id
    - name: folder
      description: The configuration folder group setting.
      auto: PREDEFINED
      defaultValue: Shared
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: limit
      description: The maximum number of results to return.
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - description: Number of results per page to display.
      name: page_size
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all custom URL categories.
    name: prisma-sase-custom-url-category-list
    outputs:
    - contextPath: PrismaSase.CustomURLCategory.id
      description: The URL category ID.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.name
      description: The URL category name.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.folder
      description: The URL category folder.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.type
      description: The URL category type.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.list
      description: The URL category match list.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.description
      description: The URL category description.
      type: String
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      description: The custom URL category's type.
      name: type
      predefined:
      - URL List
      - Category Match
      required: true
    - description: If the type is URL List, the value will be a comma-separated array of URL addresses. If the type is Category Match, the value will be a comma-separated array of category names. You can get the names by running the prisma-sase-url-access-profile-list command.
      isArray: true
      name: value
      required: true
    - name: description
      description: The custom URL category's description.
    - name: name
      required: true
      description: The name of the custom URL category.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new URL category.
    name: prisma-sase-custom-url-category-create
    outputs:
    - contextPath: PrismaSase.CustomURLCategory.id
      description: The URL category ID.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.name
      description: The URL category name.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.folder
      description: The URL category folder.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.type
      description: The URL category type.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.list
      description: The URL category match list.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.description
      description: The URL category description.
      type: String
  - arguments:
    - name: id
      required: true
      description: The custom URL category ID.
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: value
      description: The custom URL category's value.
    - auto: PREDEFINED
      defaultValue: 'false'
      name: overwrite
      predefined:
      - 'true'
      - 'false'
      description: Whether to overwrite the original custom URL category values.
    - name: description
      description: The custom URL category's description.
    - auto: PREDEFINED
      description: The custom URL category's type.
      name: type
      predefined:
      - URL List
      - Category Match
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing url category.
    name: prisma-sase-custom-url-category-update
    outputs:
    - contextPath: PrismaSase.CustomURLCategory.id
      description: The URL category ID.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.name
      description: The URL category name.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.folder
      description: The URL category folder.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.type
      description: The URL category type.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.list
      description: The URL category match list.
      type: String
    - contextPath: PrismaSase.CustomURLCategory.description
      description: The URL category description.
      type: String
  - arguments:
    - name: id
      required: true
      description: The custom URL category ID.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific URL category.
    name: prisma-sase-custom-url-category-delete
  - arguments:
    - description: The name of the object to use as a filter.
      name: name
    - description: A specific external dynamic list to return. If not specified, all external dynamic lists will be returned.
      name: id
    - name: folder
      description: The configuration folder group setting.
      auto: PREDEFINED
      defaultValue: Shared
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: limit
      description: The maximum number of results to return.
    - name: page
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
    - description: Number of results per page to display.
      name: page_size
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Lists all external dynamic lists.
    name: prisma-sase-external-dynamic-list-list
    outputs:
    - contextPath: PrismaSase.ExternalDynamicList.id
      description: The external dynamic list ID.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.name
      description: The external dynamic list name.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.folder
      description: The external dynamic list folder.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.description
      description: The external dynamic list description.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.type
      description: The external dynamic list type.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.source
      description: The external dynamic list source.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.frequency
      description: The external dynamic list frequency.
      type: String
  - arguments:
    - name: name
      required: true
      description: The external dynamic list name.
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - name: description
      description: The dynamic list's description.
    - auto: PREDEFINED
      required: true
      name: type
      predefined:
      - predefined_ip
      - predefined_url
      - ip
      - domain
      - url
      description: The dynamic list's type.
    - auto: PREDEFINED
      name: predefined_ip_list
      predefined:
      - panw-torexit-ip-list
      - panw-bulletproof-ip-list
      - panw-highrisk-ip-list
      - panw-known-ip-list
      description: The predefined IP list. If the type is predefined_ip, a value must be provided.
    - auto: PREDEFINED
      name: predefined_url_list
      description: The predefined URL list. If the type is predefined_url, a value must be provided.
      predefined:
      - panw–auth-portal-exclude-list
    - name: source_url
      description: The source URL. If the type is ip, url or domain, a value must be provided.
    - auto: PREDEFINED
      name: frequency
      description: Frequency to check for updates. The default value is five minutes.
      predefined:
      - five_minute
      - hourly
      - daily
      - weekly
      - monthly
    - name: frequency_hour
      description: The frequency hour. If the frequency argument is daily, weekly or monthly, a value must be provided. Possible values are 00-23.
    - auto: PREDEFINED
      name: day_of_week
      description: The day of the week. If the frequency argument is weekly or monthly, a value must be provided.
      predefined:
      - monday
      - tuesday
      - wednesday
      - thursday
      - friday
      - saturday
      - sunday
    - name: day_of_month
      description: The day of the month. If the frequency argument is monthly, a value must be provided. Possible values are between 1 and 31.
    - name: exception_list
      description: The user can exclude certain addresses from the list depending on the type of list.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Create a new dynamic list.
    name: prisma-sase-external-dynamic-list-create
    outputs:
    - contextPath: PrismaSase.ExternalDynamicList.id
      description: The external dynamic list ID.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.name
      description: The external dynamic list name.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.folder
      description: The external dynamic list folder.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.description
      description: The external dynamic list description.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.type
      description: The external dynamic list type.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.source
      description: The external dynamic list source.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.frequency
      description: The external dynamic list frequency.
      type: String
  - arguments:
    - name: id
      required: true
      description: The external dynamic list ID.
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - auto: PREDEFINED
      defaultValue: 'false'
      name: overwrite
      predefined:
      - 'true'
      - 'false'
      description: Whether to overwrite the original external dynamic list values.
    - name: description
      description: The dynamic list's description.
    - auto: PREDEFINED
      name: type
      predefined:
      - predefined_ip
      - predefined_url
      - ip
      - domain
      - url
      description: The dynamic list's type.
    - auto: PREDEFINED
      name: predefined_ip_list
      predefined:
      - panw-torexit-ip-list
      - panw-bulletproof-ip-list
      - panw-highrisk-ip-list
      - panw-known-ip-list
      description: The predefined IP list. If the type is predefined_ip, a value must be provided.
    - auto: PREDEFINED
      name: predefined_url_list
      description: The predefined URL list. If the type is predefined_url, a value must be provided.
      predefined:
      - panw–auth-portal-exclude-list
    - name: source_url
      description: The source URL. If the type is ip, url or domain, a value must be provided.
    - auto: PREDEFINED
      name: frequency
      description: Frequency to check for updates.
      predefined:
      - five_minute
      - hourly
      - daily
      - weekly
      - monthly
    - name: frequency_hour
      description: The frequency hour. If the frequency argument is daily, weekly or monthly, a value must be provided. Possible values are 00-23.
    - auto: PREDEFINED
      name: day_of_week
      description: The day of the week. If the frequency argument is weekly or monthly, a value must be provided.
      predefined:
      - monday
      - tuesday
      - wednesday
      - thursday
      - friday
      - saturday
      - sunday
    - name: day_of_month
      description: The day of the month. If the frequency argument is monthly, a value must be provided. Possible values are between 1 and 31.
    - name: exception_list
      description: The user can exclude certain addresses from the list depending on the type of list.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Update an existing dynamic list.
    name: prisma-sase-external-dynamic-list-update
    outputs:
    - contextPath: PrismaSase.ExternalDynamicList.id
      description: The external dynamic list ID.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.name
      description: The external dynamic list name.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.folder
      description: The external dynamic list folder.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.description
      description: The external dynamic list description.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.type
      description: The external dynamic list type.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.source
      description: The external dynamic list source.
      type: String
    - contextPath: PrismaSase.ExternalDynamicList.frequency
      description: The external dynamic list frequency.
      type: String
  - arguments:
    - name: id
      required: true
      description: The external dynamic list ID.
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Delete a specific dynamic list.
    name: prisma-sase-external-dynamic-list-delete
  - arguments:
    - auto: PREDEFINED
      defaultValue: Shared
      description: The configuration folder group setting.
      name: folder
      predefined:
      - Shared
      - Mobile Users
      - Remote Networks
      - Service Connections
      - Mobile Users Container
      - Mobile Users Explicit Proxy
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Get all predefined URL categories.
    name: prisma-sase-url-category-list
  - arguments:
    - description: The host ID.
      name: host_id
      required: true
    - description: Tenant services group ID. If not provided, the tsg_id integration parameter will be used as the default.
      name: tsg_id
    description: Quarantine a host.
    name: prisma-sase-quarantine-host
  - arguments:
    - description: The domain of the directory-sync connected to the CIE.
      name: domain
      required: true
    - description: The attribute value for the filter.
      name: value_for_filter
      required: true
    - description: A comma-separated list of attributes to return.
      defaultValue: "Common-Name, Unique Identifier, Manager, User Principal Name, Name, Distinguished Name"
      isArray: true
      name: attributes_to_return
      required: false
    - description: A comma-separated list of attributes to filter by.
      defaultValue: "Distinguished Name, Unique Identifier, Common-Name, Name, User Principal Name"
      isArray: true
      name: attributes_to_filter_by
      required: false
    - description: The operator.
      defaultValue: "Equal"
      predefined:
      - "Equal"
      - "Starts With"
      - "Ends With"
      - "Contain"
      - "Text Search"
      name: operator
      auto: PREDEFINED
      required: false
    description: Get the CIE user.
    outputs:
    - contextPath: PrismaSase.CIE.User.common_name
      description: The common name.
      type: String
    - contextPath: PrismaSase.CIE.User.distinguished_name
      description: The distinguished name.
      type: String
    - contextPath: PrismaSase.CIE.User.manager
      description: The manager.
      type: String
    - contextPath: PrismaSase.CIE.User.name
      description: The name.
      type: String
    - contextPath: PrismaSase.CIE.User.unique_identifier
      description: The unique identifier.
      type: String
    name: prisma-sase-cie-user-get
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- PrismaSASE Test
sectionorder:
- Connect
- Collect
fromversion: 6.5.0