Network Management

Supported API calls for Palo Alto devices

This article shows the supported API calls for Palo Alto devices

First published date

10/2/2019 7:45 PM

Last published date

7/31/2020 3:45 PM

Overview

Here are the supported API calls for the Orion to be able to connect to the Palo Alto device successfully.

Product section

Network Performance Monitor

Cause

Orion is not able to successfully communicate to the Palo Alto device

Resolution

Use Palo Alto tools or Solarwinds REST Walker to check:
  • "/api/?type=log&log-type=traffic&query=(user.src%20eq%20%27{0}%27)%20and%20(addr.src%20in%20{1})%20and%20(receive_time%20in%20last-15-minutes)%20and%20(subtype%20eq%20end)"
  • "/api/?type=op&cmd=<show><vpn><flow/></vpn></show>"
  • "/api/?type=op&cmd=<show><global-protect-gateway><current-user></current-user></global-protect-gateway></show>"
  • "/api/?type=op&cmd=<show><global-protect-gateway><previous-user></previous-user></global-protect-gateway></show>"
  • "/api/?type=log&action=get&job-id={0}"
  • "/api/?type=op&cmd=<show><vpn><ipsec-sa><tunnel>{0}</tunnel></ipsec-sa></vpn></show>"
  • "/api/?type=op&cmd=<show><vpn><flow><tunnel-id>{0}</tunnel-id></flow></vpn></show>"
  • "/api/?type=op&cmd=<show><interface>{0}</interface></show>"
  • "/api/?type=log&log-type=system&query=(%20object%20eq%20{0}%20)%20and%20(subtype%20eq%20vpn)%20and%20(receive_time%20in%20last-15-minutes)%20and%20(%20description%20contains%20%27failed%27%20)"
 

If the device support these API calls, then we support the device.