PaloAltoNetworks / PaloAltoNetworks/pan-os-python

Search Pano/Palo for specific existing FQDN

Open
#457 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Python
Stars
400
Forks
199
PR merge metrics
No merged PRs in 30d

Description

Is your feature request related to a problem?

Currently have to retrieve the entire scope of AddressObjects on each device (Pano/Palo FW) which costs time for an inline API request to validate DNS Host record deletion through automation.

Describe the solution you'd like

extend the current AddressObject API to retrieve a specific object / objecttype (FQDN specifically)

pass device/dg connection to api call with addressobject type FQDN and value (not name)

Describe alternatives you've considered

the cost of the entire pull is the issue, as we have to traverse several devices for absolute confirmation... causing an undesired user experience. that we know of, there are no alternatives.

we do have a working model, however; it pulls the entire addressobject object to search for a specific value

Additional context

when a user tries to delete a DNS record from our DNS control system, we need to verify that the record is not used in an existing firewall rule... this would cause the rule to break (not function).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the existing AddressObject API and how it retrieves the full object scope from a device or device group. Done should mean the API can accept a device/DG connection, FQDN object type, and value, then retrieve a specific existing object without pulling the entire collection.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, networking, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.