PaloAltoNetworks / PaloAltoNetworks/pan-os-python
Search Pano/Palo for specific existing FQDN
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 400
- Forks
- 199
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem?
Currently have to retrieve the entire scope of AddressObjects on each device (Pano/Palo FW) which costs time for an inline API request to validate DNS Host record deletion through automation.
Describe the solution you'd like
extend the current AddressObject API to retrieve a specific object / objecttype (FQDN specifically)
pass device/dg connection to api call with addressobject type FQDN and value (not name)
Describe alternatives you've considered
the cost of the entire pull is the issue, as we have to traverse several devices for absolute confirmation... causing an undesired user experience. that we know of, there are no alternatives.
we do have a working model, however; it pulls the entire addressobject object to search for a specific value
Additional context
when a user tries to delete a DNS record from our DNS control system, we need to verify that the record is not used in an existing firewall rule... this would cause the rule to break (not function).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the existing AddressObject API and how it retrieves the full object scope from a device or device group. Done should mean the API can accept a device/DG connection, FQDN object type, and value, then retrieve a specific existing object without pulling the entire collection.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100