<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://www.staffordnet.uk/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="https://www.staffordnet.uk/feed.php">
        <title>Saucepan - paloaltonetworks:api:scripts</title>
        <description></description>
        <link>https://www.staffordnet.uk/</link>
        <image rdf:resource="https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico" />
       <dc:date>2026-04-05T21:40:55+00:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:backup&amp;rev=1669207782&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:example&amp;rev=1669207782&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_backup&amp;rev=1669207782&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_sync&amp;rev=1669207782&amp;do=diff"/>
                <rdf:li rdf:resource="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:user_id_configuration&amp;rev=1669207782&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico">
        <title>Saucepan</title>
        <link>https://www.staffordnet.uk/</link>
        <url>https://www.staffordnet.uk/lib/exe/fetch.php?media=favicon.ico</url>
    </image>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:backup&amp;rev=1669207782&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-11-23T12:49:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>backup</title>
        <link>https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:backup&amp;rev=1669207782&amp;do=diff</link>
        <description>Backup Scripts

PowerShell

Reddit user alphaxion has posted an excellent PowerShell script for backing up Palo Alto Networks firewalls that are not in Panorama

The original post can be found here.

# Define some base variables

$fwHost = &quot;IP address here&quot;

$apiKey = &quot;API key here&quot;

$ageLimit = (Get-Date).AddDays(-90)

# Configure cipher suite to avoid protocol downgrade

add-type @&quot;

using System.Net;

using System.Security.Cryptography.X509Certificates;

public class TrustAllCertsPolicy : ICe…</description>
    </item>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:example&amp;rev=1669207782&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-11-23T12:49:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>example</title>
        <link>https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:example&amp;rev=1669207782&amp;do=diff</link>
        <description>Scripting Examples

Example Script

Here is an example of using Curl in a batch script. You will need to remove the ECHO from the last line in order for the batch file to actually run the command. As it stands, it will just print the command to the screen.</description>
    </item>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_backup&amp;rev=1669207782&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-11-23T12:49:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>firewall_config_backup</title>
        <link>https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_backup&amp;rev=1669207782&amp;do=diff</link>
        <description>PAN-OS API Backup Firewall Configuration

Palo Alto Networks has a document on configuration export here.

Windows Batch File

:: This is a Windows Batch script that can be used to extract a backup of the configuration file from a Palo Alto Networks firewall.

::For this script to work, you will need an API key the firewall. Generate the API key with the following commands.
::  https://FIREWALL_1_IP/api/?type=keygen&amp;user=XML_USERNAME_HERE&amp;password=XML_PASSWORD_HERE

@echo off

SET FW_KEY=API_KEY…</description>
    </item>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_sync&amp;rev=1669207782&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-11-23T12:49:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>firewall_config_sync</title>
        <link>https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:firewall_config_sync&amp;rev=1669207782&amp;do=diff</link>
        <description>Firewall Configuration Sync Script

Windows Batch File

Useful for keeping two load balanced VM&#039;s in sync in Azure.

:: This is a Windows Batch script that can be used to quickly sync the configuration of one Palo Alto Networks firewall with another.
:: This is meant to be used between two virtual firewalls in Azure or AWS that are not a high availability pair but are part of a load balanced &#039;pair&#039;.
:: This works when the virtual machines do not have any statically assigned IP addresses within t…</description>
    </item>
    <item rdf:about="https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:user_id_configuration&amp;rev=1669207782&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2022-11-23T12:49:42+00:00</dc:date>
        <dc:creator>Anonymous (anonymous@undisclosed.example.com)</dc:creator>
        <title>user_id_configuration</title>
        <link>https://www.staffordnet.uk/doku.php?id=paloaltonetworks:api:scripts:user_id_configuration&amp;rev=1669207782&amp;do=diff</link>
        <description>User-ID API Configuration

PowerShell

Here is an example of using PowerShell script. This example sets a User-ID mapping entry on a firewall.

#Use TLS1.2
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12


$API_KEY = &#039;YOUR_API_KEY_HERE&#039;

$FW_FQDN = &#039;fw1.example.local&#039;

$TYPE = &#039;user-id&#039;

$VSYS = &#039;vsys1&#039;

$ACTION = &#039;set&#039;

$CMD= &quot;&lt;uid-message&gt;&lt;version&gt;1.0&lt;/version&gt;&lt;type&gt;update&lt;/type&gt;&lt;payload&gt;&lt;login&gt;&lt;entry%20name=&quot;&quot;username-here&quot;&quot;%20ip=&quot;&quot;192.168.1.1&quot;&quot;%20timeout=&quot;&quot;0&quot;&quot;…</description>
    </item>
</rdf:RDF>
