PanoramaSecurityPolicyMatchWrapper
A wrapper script for the panorama-security-policy-match command that receives multiple values for the source, destination, and destination port arguments and performs the policy match for each combination of the inputs.
python · PAN-OS by Palo Alto Networks
Details
| ID | PanoramaSecurityPolicyMatchWrapper |
|---|---|
| Language | python |
| From Version | 6.1.0 |
| Docker Image | demisto/python3:3.12.13.10404775 |
README
A wrapper script for the panorama-security-policy-match command that receives multiple values for the source, destination, and destination port arguments and performs the policy match for each combination of the inputs.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | |
| Cortex XSOAR Version | 6.1.0 |
Inputs
| Argument Name | Description |
|---|---|
| application | The application name. |
| category | The category name. |
| destination | A comma-separated list of destination IP addresses. |
| from | The from zone. |
| to | The to zone. |
| protocol | The IP protocol value. |
| source | A comma-separated list of source IP addresses. |
| target | Target number of the firewall. Use only on a Panorama instance. |
| vsys | Target vsys of the firewall. Use only on a Panorama instance. |
| source_user | The source user. |
| destination_port | A comma-separated list of destination ports. |
| limit | Maximum number of API calls that script sends. |
Outputs
| Path | Description | Type |
|---|---|---|
| Panorama.SecurityPolicyMatch.Rules.Name | The matching rule name. | String |
| Panorama.SecurityPolicyMatch.Rules.Action | The matching rule action. | String |
| Panorama.SecurityPolicyMatch.Rules.Category | The matching rule category. | String |
| Panorama.SecurityPolicyMatch.Rules.Destination | The matching rule destination. | String |
| Panorama.SecurityPolicyMatch.Rules.From | The matching rule from zone. | String |
| Panorama.SecurityPolicyMatch.Rules.Source | The matching rule source. | String |
| Panorama.SecurityPolicyMatch.Rules.To | The matching rule to zone. | String |
Script Examples
Example command
!PanoramaSecurityPolicyMatchWrapper destination=2.2.2.2 source=1.1.1.1,8.8.8.8 protocol=1
Context Example
{
"Panorama": {
"SecurityPolicyMatch": {
"Rules": {
"Action": "deny",
"Category": "any",
"Destination": "2.2.2.2",
"From": "any",
"Name": "test rule",
"Source": "1.1.1.1",
"To": "any"
}
}
}
}
Human Readable Output
Matching Security Policies
Action Category Destination From Name Source To deny any 2.2.2.2 any test rule 1.1.1.1 any The query for source: 8.8.8.8, destination: 2.2.2.2 did not match a Security policy.
args: - description: The application name. name: application - description: The category name. name: category - description: A comma-separated list of destination IP addresses. name: destination required: true isArray: true - description: The from zone. name: from - description: The to zone. name: to - description: "The IP protocol value, E.g., ICMP=1, TCP=6 or UDP=17." name: protocol required: true - description: A comma-separated list of source IP addresses. name: source required: true isArray: true - description: Target number of the firewall. Use only on a Panorama instance. name: target isArray: true - description: Target vsys of the firewall. Use only on a Panorama instance. name: vsys isArray: true - description: The source user. name: source_user - description: A comma-separated list of destination ports. name: destination_port isArray: true - description: Maximum number of API calls the script sends. name: limit defaultValue: '500' comment: 'A wrapper script for the panorama-security-policy-match command that receives multiple values for the source, destination, and destination port arguments and performs the policy match for each combination of the inputs.' commonfields: id: PanoramaSecurityPolicyMatchWrapper version: -1 name: PanoramaSecurityPolicyMatchWrapper outputs: - contextPath: Panorama.SecurityPolicyMatch.Rules.Name description: The matching rule name. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.Action description: The matching rule action. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.Category description: The matching rule category. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.Destination description: The matching rule destination. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.From description: The matching rule from zone. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.Source description: The matching rule source. type: String - contextPath: Panorama.SecurityPolicyMatch.Rules.To description: The matching rule to zone. type: String script: '-' timeout: '0' type: python subtype: python3 dockerimage: demisto/python3:3.12.13.10404775 fromversion: 6.1.0 tests: - No tests (auto formatted) supportedModules: - agentix - xsiam - cloud_posture