Table of Contents
PAN.OS 11.1 & Later
Expand all | Collapse all
-
- Upgrade a Firewall to the Latest PAN-OS Version (API)
- Show and Manage GlobalProtect Users (API)
- Query a Firewall from Panorama (API)
- Upgrade PAN-OS on Multiple HA Firewalls through Panorama (API)
- Automatically Check for and Install Content Updates (API)
- Enforce Policy using External Dynamic Lists and AutoFocus Artifacts (API)
- Configure SAML 2.0 Authentication (API)
- Quarantine Compromised Devices (API)
- Manage Certificates (API)
-
- Asynchronous and Synchronous Requests to the PAN-OS XML API
- Run Operational Mode Commands (API)
- Apply User-ID Mapping and Populate Dynamic Groups (API)
- Get Version Info (API)
-
- PAN-OS REST API
- Access the PAN-OS REST API
- Resource Methods and Query Parameters (REST API)
- PAN-OS REST API Request and Response Structure
- PAN-OS REST API Error Codes
- Work With Objects (REST API)
- Create a Security Policy Rule (REST API)
- Work with Policy Rules on Panorama (REST API)
- Create a Tag (REST API)
- Configure a Security Zone (REST API)
- Configure an SD-WAN Interface (REST API)
- Create an SD-WAN Policy Pre Rule (REST API)
- Configure an Ethernet Interface (REST API)
- Update a Virtual Router (REST API)
- Work With Decryption (APIs)
Commit
Replace thebody element
in thecmd parameter with the XML element
for the corresponding commit operation.
Use
the API Browser to find different options available for use
with force and partial commits.
- Use one of the following requests to commit a
configuration:
-
Commit— Commit candidate changes to the firewall.
curl -X POST 'https://firewall/api?type=commit&cmd=<commit></commit>"-
Force Commit—
curl -X POST 'https://firewall/api?type=commit&cmd=<commit><force></force></commit>"-
Partial commit while excluding shared objects and device and network configuration—
curl -X POST 'https://firewall/api?type=commit&action=partial&cmd=<commit><partial><device-and-network>excluded</device-and-network><shared-object>excluded</shared-object></partial></commit>"-
Partial commit admin-level changes— To commit admin-level changes on a firewall, include the administrator name in the request.
curl -X POST 'https://firewall/api?&type=commit&action=partial&cmd=<commit><partial><admin><member>$admin-name</member></admin></partial></commit>"-
Partial commit admin-level changes on a firewall or Panorama while excluding shared objects—Include the administrator name in the request. Replace the $admin-name Replace
curl -X POST 'https://firewall/api?&type=commit&action=partial&cmd=<commit><partial><device-and-network>excluded</device-and-network><shared-object>excluded</shared-object><admin><member>socadmin</member></admin></partial></commit>"- Confirm that the XML response indicates that there were no changes to commit or that the changes are queued for commit:
-
No pending changes to commit:<response status="success" code="19"> <msg>There are no changes to commit.</msg></response>
-
Pending changes:<response status="success" code="19"> <result> <msg> <line>Commit job enqueued with jobid 4</line> </msg> <job>4</job> </result> </response>
- Query the status of the job using the job ID:curl -X POST 'https://firewall/api?type=op&cmd=<show><jobs><id>4</id></jobs></show>"
- Confirm that the XML response details state the Configuration was committed successfully:
<response status="success"> <result> <job> <tenq>2021/07/21 14:33:55</tenq> <tdeq>14:33:55</tdeq> <id>4</id> <user>admin</user> <type>Commit</type> <status>ACT</status> <queued>NO</queued> <stoppable>yes</stoppable> <result>PEND</result> <tfin></tfin> <description></description> <positionInQ>0</positionInQ> <progress>55</progress> <warnings> <line>Aggregate-ethernet interface ae1 has no member interfaces.</line> </warnings> <details></details> </job> </result> </response> - Confirm that the XML response details state the Configuration was committed successfully:
-
-