bilalbox/panos_rule_exporter

Tool for exporting PANOS security rulebase to a spreadsheet with address and service objects resolved

panos_rule_exporter

Tool for exporting PANOS security rulebase to a spreadsheet with address and service objects resolved

This script takes either a Panorama URL or Panorama configuration XML as input as well as device-group name and returns the security rulebase as an Excel spreadsheet with all address and service objects resolved. A sample Panorama configuration file is included, though you are encouraged to work with your own configuration when testing and extending the script!

Requirements

• xmltodict
• requests
• pytest
• flask
• flask-wtf
• flask-bootstrap
• flask-excel
• pyexcel-xlsx

Usage

Currently you can run the script as-is and it will process the included local Panorama configuration XML. However, you are encouraged to either replace that XML file with one exported from your own Panorama, or pull the configuration live by this code in the main function:

def main():
...
    with open(PAN_CFG_FILE, 'r') as f:
        pan_cfg = xmltodict.parse(f.read())['response']['result']

with something like this:

def main():
...
    pan_cfg = xmltodict.parse(get_config(Config.URL, Config.API_KEY))

You'll also need to update the config.py with your Panorama information.

Contributing

1. Fork it (https://github.com/bilalbox/panos_rule_exporter/fork)
2. Create your feature branch (git checkout -b feature/fooBar)
3. Commit your changes (git commit -am 'Add some fooBar')
4. Push to the branch (git push origin feature/fooBar)
5. Create a new Pull Request
6. Make sure to add yourself to the list of AUTHORS

License

Distributed under the MIT license. See LICENSE for more information.