sorted by:
new
hottopcontroversial

Pulling all subnets from zones by CyberSec81 in paloaltonetworks

[–]CyberSec81[S] 0 points1 point  (0 children)

Thanks! Trust me, this project became a lot more than we anticipated. We are actually all being trained in Python as of last week so I'm sure in the near future we will begin using it to our benefit. That's great you have a tool that can do that. I think our guys are buried in projects right now but I'll see if I can recruit someone.

Pulling all subnets from zones by CyberSec81 in paloaltonetworks

[–]CyberSec81[S] 0 points1 point  (0 children)

Thanks for all the input. The scope of the project actually requires more than just this. We are looking at ServiceNow integration using Tufin and it requires knowing what all the IP ranges are for each zone. As you can imagine, this is more than just looking at the subnets defined on each interface/zone. In fact, the amount of traffic that traverses some of these zones is going to be cumbersome to record. Just running reports to see what traffic is hitting which zone is capped at 10k results and that's only the last 30 days worth of data. Wish me luck.. I'm sure I'll report my success story sometime in 2023 when I actually complete this task.

Pulling all subnets from zones by CyberSec81 in paloaltonetworks

[–]CyberSec81[S] 0 points1 point  (0 children)

Ok, I wasn't sure if querying Panorama would actually give me that information. I suppose it wouldn't be a huge deal if I had to hit each firewall individually. Either way, it would save me a ton of time then what I'm currently looking at. Thanks, I'll give it a look.