community / community.network / 1.3.7 / module / panos_match_rule
Removed in 2.0.0
Reason:Consolidating code base. | Alternative:Use U(https://galaxy.ansible.com/PaloAltoNetworks/paloaltonetworks) instead.
Test for match against a security rule on PAN-OS devices or Panorama management console.
Authors: Robert Hagen (@rnh556)
Install with ansible-galaxy collection install community.network:==1.3.7
collections: - name: community.network version: 1.3.7
Security policies allow you to enforce rules and take action, and can be as general or specific as needed.
- name: Check security rules for Google DNS community.network.panos_match_rule: ip_address: '{{ ip_address }}' username: '{{ username }}' password: '{{ password }}' rule_type: 'security' source_ip: '10.0.0.0' destination_ip: '8.8.8.8' application: 'dns' destination_port: '53' protocol: '17' register: result
- ansible.builtin.debug: msg='{{result.stdout_lines}}'
- name: Check security rules inbound SSH with user match community.network.panos_match_rule: ip_address: '{{ ip_address }}' username: '{{ username }}' password: '{{ password }}' rule_type: 'security' source_ip: '0.0.0.0' source_user: 'mydomain\jsmith' destination_ip: '192.168.100.115' destination_port: '22' protocol: '6' register: result
- ansible.builtin.debug: msg='{{result.stdout_lines}}'
- name: Check NAT rules for source NAT community.network.panos_match_rule: ip_address: '{{ ip_address }}' username: '{{ username }}' password: '{{ password }}' rule_type: 'nat' source_zone: 'Prod-DMZ' source_ip: '10.10.118.50' to_interface: 'ethernet1/2' destination_zone: 'Internet' destination_ip: '0.0.0.0' protocol: '6' register: result
- ansible.builtin.debug: msg='{{result.stdout_lines}}'
- name: Check NAT rules for inbound web community.network.panos_match_rule: ip_address: '{{ ip_address }}' username: '{{ username }}' password: '{{ password }}' rule_type: 'nat' source_zone: 'Internet' source_ip: '0.0.0.0' to_interface: 'ethernet1/1' destination_zone: 'Prod DMZ' destination_ip: '192.168.118.50' destination_port: '80' protocol: '6' register: result
- ansible.builtin.debug: msg='{{result.stdout_lines}}'
- name: Check security rules for outbound POP3 in vsys4 community.network.panos_match_rule: ip_address: '{{ ip_address }}' username: '{{ username }}' password: '{{ password }}' vsys_id: 'vsys4' rule_type: 'security' source_ip: '10.0.0.0' destination_ip: '4.3.2.1' application: 'pop3' destination_port: '110' protocol: '6' register: result
- ansible.builtin.debug: msg='{{result.stdout_lines}}'
api_key: description: - API key that can be used instead of I(username)/I(password) credentials. vsys_id: default: vsys1 description: - ID of the VSYS object. required: true category: description: - URL category password: description: - Password credentials to use for auth unless I(api_key) is set. required: true protocol: description: - The IP protocol number from 1 to 255. username: default: admin description: - Username credentials to use for auth unless I(api_key) is set. rule_type: choices: - security - nat description: - Type of rule. Valid types are I(security) or I(nat). required: true source_ip: description: - The source IP address. required: true ip_address: description: - IP address (or hostname) of PAN-OS device being configured. required: true application: description: - The application. source_port: description: - The source port. source_user: description: - The source user or group. source_zone: description: - The source zone. to_interface: description: - The inbound interface in a NAT rule. destination_ip: description: - The destination IP address. destination_port: description: - The destination port. destination_zone: description: - The destination zone.