PaloAltoNetworks/pan-os-ansible

Module for upgrade assurance health checks

adambaumeister opened this issue · 2 comments

Is your feature request related to a problem?

No

Describe the solution you'd like

We should be able to run the health checks in the same way we can run readiness checks with an Ansible Task.

- name: Run all management plane checks using NOT notation
  panos_health_checks:
    provider: '{{ device }}'

We use health checks to push out automated ways of looking for advisories that may affect PAN-OS firewalls, such as the recent certificate expiration issues.

Could you share how you are running health checks ?

@SirLagsAlot1177 we're currently implementing specific 'health checks' for devices based on released customer PAN advisories. We hope to eventually have a pretty large library of them as well as a process in place to take, say, security vulnerabilties and have a test available for them in the library.

Details of what's currently supported are here.