All Projects → rodvand → netbox-paloalto

rodvand / netbox-paloalto

Licence: Apache-2.0 license
NetBox plugin for listing firewall rules (from a Palo Alto Networks firewall/Panorama) associated with a NetBox object.

Programming Languages

python
139335 projects - #7 most used programming language
HTML
75241 projects

Projects that are alternatives of or similar to netbox-paloalto

netbox-bgp
NetBox plugin for BGP related objects documentation
Stars: ✭ 135 (+400%)
Mutual labels:  netbox, netbox-plugin
ntc-netbox-plugin-metrics-ext
NetBox Plugin to improve the instrumentation of NetBox and expose additional metrics (Application Metrics, RQ Worker).
Stars: ✭ 32 (+18.52%)
Mutual labels:  netbox, netbox-plugin
netbox-plugin-skeleton
Skeleton for starting NetBox plugins
Stars: ✭ 15 (-44.44%)
Mutual labels:  netbox, netbox-plugin
netbox-vcenter
vCenter integration plugin for NetBox
Stars: ✭ 36 (+33.33%)
Mutual labels:  netbox, netbox-plugin
coredns-netbox-plugin
A coredns plugin to get dns records from Netbox
Stars: ✭ 35 (+29.63%)
Mutual labels:  netbox
netbox-agent
Netbox agent to run on your infrastructure's servers
Stars: ✭ 99 (+266.67%)
Mutual labels:  netbox
ttl255.com
ttl255.com - Resources
Stars: ✭ 31 (+14.81%)
Mutual labels:  netbox
netbox-joined-inventory
Netbox_joined_inventory is a python script that gathers data from a Netbox source-of-truth and stores them as Ansible inventory, group_vars and host_vars files.
Stars: ✭ 21 (-22.22%)
Mutual labels:  netbox
django-netbox-graphql
Django module which provides a GraphQL API for Netbox
Stars: ✭ 16 (-40.74%)
Mutual labels:  netbox
Splunk TA paloalto
The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.
Stars: ✭ 15 (-44.44%)
Mutual labels:  palo-alto-networks
netbox-sync
Sync objects from VMware or redfish sources to NetBox
Stars: ✭ 172 (+537.04%)
Mutual labels:  netbox
Netbox
Infrastructure resource modeling for network automation. Open source under Apache 2. Public demo: https://demo.netbox.dev
Stars: ✭ 9,310 (+34381.48%)
Mutual labels:  netbox
python-netboxapi
Python client API for Netbox
Stars: ✭ 30 (+11.11%)
Mutual labels:  netbox
netbox-plugin-auth-saml2
Netbox plugin for SSO using SAML2
Stars: ✭ 87 (+222.22%)
Mutual labels:  netbox-plugin
netbox-secretstore
No description or website provided.
Stars: ✭ 63 (+133.33%)
Mutual labels:  netbox-plugin
netbox automation
Manage netbox configuration with automation. Netbox as a the source of truth: generate an ansible inventory file from Netbox with automation, generate yaml files for ansible playbooks or jinja templates from Netbox with automation
Stars: ✭ 28 (+3.7%)
Mutual labels:  netbox
ntmap
Network topology map using Netbox as a data source
Stars: ✭ 74 (+174.07%)
Mutual labels:  netbox
network-importer
The network importer is a tool/library to analyze and/or synchronize an existing network with a Network Source of Truth (SOT), it's designed to be idempotent and by default it's only showing the difference between the running network and the remote SOT.
Stars: ✭ 120 (+344.44%)
Mutual labels:  netbox
hphr
Halophile Router (a VyOS-based, SaltStack-automated, NetBox-configured router for small provider networks)
Stars: ✭ 39 (+44.44%)
Mutual labels:  netbox
yaani
Yet another Ansible Netbox inventory
Stars: ✭ 12 (-55.56%)
Mutual labels:  netbox

PyPI

Palo Alto Networks firewall/Panorama NetBox plugin

This plugin enables you to list firewall rules defined on your Palo Alto Networks firewall or Panorama management server directly in NetBox. The URL <NETBOX>/plugins/paloalto/<object> will list all firewall rules associated with object (see limitations further down).

Preview

Plugin preview

Compatibility

NetBox 2.8 and higher.
Tested on Panorama PAN-OS 9.1 and PA-220 PAN-OS 9.1.

Installation

Add netbox-paloalto to your local_requirements.txt.

Add netbox_paloalto to configuration.py like this:

PLUGINS = ['netbox_paloalto']

Run ./upgrade.sh which will download the package and run the necessary database migrations.

Add you firewall/Panorama (can have multiple) through the Admin GUI of NetBox.

Available settings

Assume a NetBox object with name Server01 and IP 1.2.3.4.
Available settings in PLUGINS_CONFIG is:

transform: True/False - Netbox object is transformed before the search in Panorama/firewall. 
                        Additional search term will be Server01.3.4. Default: False
nesting: <int> - The number of levels of nesting within address groups to perform. Default: 1

Generate your Palo Alto firewall API key

See Palo Alto Networks documentation on generating your API key. As this plugin is only reading the configuration a read-only user is recommended.

Limitations

  • Limited nesting for address groups as default
  • Does not include "any" rules based on zones (can't tell the zone from the object name)
  • Does not match with subnet rules (you can have a rule saying 10.0.0.0/8 is allowed, but your object with the address 10.1.1.1 is not listed)
  • Does currently not support other rule types than security rules (no NAT/Decryption/etc)
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].