PAN-OS® and Panorama™API Usage Guide
    : Commit-All
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. PAN-OS® and Panorama™API Usage Guide
    4. PAN-OS XML API Request Types
    5. Commit Configuration (API)
    6. Commit-All
    Download PDF

    PAN-OS® and Panorama™API Usage Guide

    Commit-All

    Table of Contents
    End-of-Life (EoL)

    Commit-All

    To centrally manage firewalls from Panorama, use the commit-all API request type to push and validate shared policy to the firewalls using device groups and configuration to Log Collectors and firewalls using templates or template stacks.
    When you make a configuration change to a parent device group, only the Panorama web interface supports pushing these changes to managed firewalls associated with its child device groups. Panorama XML API pushes device group configuration changes only to managed firewalls directly associated with the impacted device group. Panorama does not automatically push the changes to any managed firewalls associated with its child device groups.
    Commit Type
    API Request
    Pre-commit policy validation.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><validate-only></validate-only></shared-policy></commit-all>"
    Specific device group commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
    Specific device group commit without including default device/network template changes.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><include-template>no</include-template><device-group><entry name="<device-group-name>"/></device-group></shared-policy></commit-all>"
    Virtual system (vsys) commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"/><devices><entry name="<serial_number>"><vsys><member>vsys-name</member></vsys></entry></devices></device-group></shared-policy></commit-all>"
    Specific firewall commit.
    		 
    curl -X POST 'https://panorama/api?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="<device-group-name>"><devices><entry name="<serial_number>"></devices></entry></device-group></shared-policy></commit-all>"
    Use the API Browser to find other options available for granular commit operations on Panorama. In thecmd parameter, you must replace the XML element for the correspondingcommit-all operation.

    © 2024 Palo Alto Networks, Inc. All rights reserved.