PaloAltoNetworks/pan-os-ansible

Support Match Rule - Less Requirments

ai-ryanbess opened this issue · 1 comments

Currently to pull a report via the API for rules you have to be pretty specific https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_match_rule_module.html (destination_ip, destination_port, protocol, etc). Please support being less restrictive. In my use case i want to only find rules that are zone based (source_zone, destination_zone). Please support being able to retrieve all rules based upon a tag in the rule.

actually looks like this module may be the best way is to use the panos_security_rule module. Within Console.redhat.com there are a ton more options to use the gathered filter. It does seem to work but why wouldn't https://ansible-pan.readthedocs.io/en/latest/modules/panos_security_rule_module.html be updated with all the switches? Is it a document issue?