Table of Contents

PAN-OS API Load Partial

Prefix all commands with 

https://10.1.1.1/api/?key=API_KEY

Load Address Objects

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/address</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/address</to-xpath><mode>merge</mode></partial></config></load>

Load Address Group Objects

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/address-group</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/address-group</to-xpath><mode>merge</mode></partial></config></load>

Load Service Objects

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/service</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/service</to-xpath><mode>merge</mode></partial></config></load>

Load Service Group Objects

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/service-group</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/service-group</to-xpath><mode>merge</mode></partial></config></load>

Load Application Group Objects

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/application-group</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/application-group</to-xpath><mode>merge</mode></partial></config></load>

Load All Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles</to-xpath><mode>merge</mode></partial></config></load>

Load URL Filtering Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/url-filtering</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/url-filtering</to-xpath><mode>merge</mode></partial></config></load>

Load Anti-Virus Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/virus</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/virus</to-xpath><mode>merge</mode></partial></config></load>

Load Vulnerability Protection Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/vulnerability</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/vulnerability</to-xpath><mode>merge</mode></partial></config></load>

Load Wildfire Analysis Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/wildfire-analysis</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/wildfire-analysis</to-xpath><mode>merge</mode></partial></config></load>

Load File Blocking Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/file-blocking</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/file-blocking</to-xpath><mode>merge</mode></partial></config></load>

Load Custom UTL Category Profiles

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/custom-url-category</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/profiles/custom-url-category</to-xpath><mode>merge</mode></partial></config></load>

Load Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase</to-xpath><mode>merge</mode></partial></config></load>

Load Security Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/security</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/security</to-xpath><mode>merge</mode></partial></config></load>

Load Default Security Rules Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/default-security-rules</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/default-security-rules</to-xpath><mode>merge</mode></partial></config></load>

Load NAT Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/nat</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/nat</to-xpath><mode>merge</mode></partial></config></load>

Load PBF Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/pbf</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/pbf</to-xpath><mode>merge</mode></partial></config></load>

Load Decryption Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/decryption</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/decryption</to-xpath><mode>merge</mode></partial></config></load>

Load QoS Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/qos</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/qos</to-xpath><mode>merge</mode></partial></config></load>

Load DOS Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/dos</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/dos</to-xpath><mode>merge</mode></partial></config></load>

Load Application Override Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/application-override</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/application-override</to-xpath><mode>merge</mode></partial></config></load>

Load Authentication Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/authentication</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/authentication</to-xpath><mode>merge</mode></partial></config></load>

Load Tunnel Inspection Rulebase

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/tunnel-inspect</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/rulebase/tunnel-inspect</to-xpath><mode>merge</mode></partial></config></load>

Load All Network Profiles

Profiles are Interface Managment, BDF, LLDP, Zone Protection and Monitor 

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/network/profiles</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/network/profiles</to-xpath><mode>merge</mode></partial></config></load>

Load All Interfaces

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/network/interface</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/network/interface</to-xpath><mode>merge</mode></partial></config></load>

Load All Ethernet Interfaces

You can also load loopback, tunnel and vlan interfaces 

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/network/interface/ethernet</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/network/interface/ethernet</to-xpath><mode>merge</mode></partial></config></load>

Load All Virtual Routers

You can also load loopback, tunnel and vlan interfaces 

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/network/virtual-router</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/network/virtual-router</to-xpath><mode>merge</mode></partial></config></load>

Load All Zones

&type=op&cmd=<load><config><partial><from>running-config.xml</from><from-xpath>devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/zone</from-xpath><to-xpath>/config/devices/entry[%40name%3D'localhost.localdomain']/vsys/entry[%40name%3D'vsys1']/zone</to-xpath><mode>merge</mode></partial></config></load>