PAN-OS - Create Or Edit Rule

Creates or edits a Panorama rule and moves it into the desired position

PAN-OS by Palo Alto Networks · 11 tasks · 9 inputs · 0 outputs

Inputs

  • device-group — The device group to work on. Exists only in panorama!
  • rule_name — The name of the rule to update, or the name of the rule that will be created.
  • log-forwarding-object-name — The server address to which to forward logs.
  • rule-position — The position of the rule in the ruleset. Valid values are: * Top * Bottom * Before * After The default is 'Bottom'
  • relative-rule-name — If the rule-position that is chosen is before or after, specify the rule name to which it is related.
  • inbound-or-outbound-rule — Determines if the rule is inbound or outbound.
  • element-to-add — the element to add to the rule
  • action-type — The action that will be defined in the rule. Valid values are: * allow * deny * drop
  • pre-post-rulebase — Determines whether the rule is a pre-rulebase or post-rulebase rule, according to the rule structure. Exists only in panorama!

Commands used

pan-os-create-rule pan-os-edit-rule pan-os-list-rules pan-os-move-rule

Flowchart

yes Inbound Outbound Inbound Outbound Start Start List all rules - pan-os-list-rules List all rules pan-os-list-rules Does the rule exist? Does the rule exist? Is the rule inbound or outbound? Is the rule inbound or ou... Is the rule inbound or outbound? Is the rule inbound or ou... Add new source to the rule - pan-os-edit-rule Add new source to the rule pan-os-edit-rule Add the new destination to the rule - pan-os-edit-rule Add the new destination t... pan-os-edit-rule Create an outbound rule - pan-os-create-rule Create an outbound rule pan-os-create-rule Move the rule into its position - pan-os-move-rule Move the rule into its po... pan-os-move-rule Done Done Create an inbound rule - pan-os-create-rule Create an inbound rule pan-os-create-rule