panco

Command-line tool that interacts with Palo Alto firewalls and Panorama.

Abilities include:

Objects

• Import (create, update) and export the following:
  • Address objects (IP, Range, FQDN), address groups (static and dynamic), service objects (TCP, UDP, port-ranges, etc.), service groups.

Policy

• Import (create, update) and export a security policy:
  • Add new rules to a policy.
  • Modify existing rules to update values (e.g. update lots of rules with a Log Profile, or Security Profile group).
• Move rules in a policy
  • Move a single rule, or multiple rules (using a CSV file) anywhere within a policy.

Provision Devices

• Provision a device using IronSkillet loadable_configs or from a different configuration file.
  • Can use a local file, or pull one from a remote HTTP location.

For a detailed explanation of commands, and how they are used, please visit the Wiki page or click on any one of the command names below (takes you to their respective Wiki page).

panco help, objects, policy, provision

Installation

Installation of extremely easy, and just involves downloading the correct binary for your OS. You can download them by clicking on the release tab above.

Current support OS's:

• Windows
• Mac OS

Just download the panco-<OS>.zip file, extract the binary and place it somewhere in your PATH.

Getting Started

• Visit the Wiki

There you will find in-depth documentation and examples on how to structure the CSV file(s) when working with objects and policies.

Usage

Command-line tool that interacts with Palo Alto firewalls and Panorama.

See https://github.com/scottdware/panco/Wiki for more information

Usage:
  panco [command]

Available Commands:
  example     Create example CSV files for import reference
  help        Help about any command
  objects     Import and export address and service objects
  policy      Import/export a security policy, move rules
  provision   Provision a device using IronSkillet or a local or remote (HTTP) file
  version     Prints the version number of panco

Flags:
  -h, --help   help for panco

Use "panco [command] --help" for more information about a command.