EVE-NG Linux VM SSH troubleshooting
September 20, 2025
Automating Palo Alto Firewall via Python PAN SDK
In the previous post, we explored the official pan-os-python library maintained by Palo Alto Networks. We also noted that this library build
In the previous post, we explored the official pan-os-python library maintained by Palo Alto Networks. We also noted that this library builds upon the personal work of Kevin Steves, who developed the pan-python library, enabling low-level operations on PAN-OS systems. Kevin also included several command-line tools to perform operations via CLI instead of Python.
The documentation is available online in reStructuredText format. The following modules are supported:
- pan.afapi : provides CLI access to AutoFocus via panafapi
- pan.licapi : manages PAN-OS licenses via CLI using panlicapi
- pan.wfapi : interfaces with WildFire via CLI using panwfapi
- pan.xapi : enables operations via the XML API, accessible via CLI with panconf and panxapi
As we’ll see in the examples, PAN SDK essentially provides an interface to the XML API, with some added conveniences. The upcoming examples will resemble those from the XML API post.
PAN SDK relies on Python’s ElementTree , which reminds us:
A large number of log entries can cause a memory exception which may not be possible to catch.
Continue reading the post on Patreon .