PaloAltoNetworks / PaloAltoNetworks/pan-os-python
Feature/Zone Protection Profiles
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 400
- Forks
- 199
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem?
I would like to implement zone protection profiles across a large fleet of firewalls and tune them individually per site.
Describe the solution you'd like
While it is currently possible to attach a pre-existing zone protection profile to a zone via the panos library, it is not possible to create or modify zone protection profiles. I would like to be able to create and modify zone protection profiles so that I can automate changes across a large number of firewalls.
Describe alternatives you've considered
I'm currently creating and applying zone protection profiles manually. I imagine it's possible to automate this using the pan.xapi library or requests, but I'd like to have the option to do it here.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by examining how the panos library currently attaches an existing zone protection profile to a zone. Compare that behavior with the pan.xapi or requests alternatives mentioned in the issue, then define the library entry points needed to create and modify profiles. Done means profiles can be created, updated, and automated across firewalls.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100