Deprecated

This Ansible Galaxy role is no longer supported and users should switch to the new Ansible collection. Please use the updated collection found here: Palo Alto Networks Ansible Collection.

Palo Alto Networks Ansible Modules

This is a set of Ansible modules designed to automate tasks and configuration for Palo Alto Networks Next Generation Firewalls, whether they are physical devices or virtual machines. These modules operate using API calls integrated into the Ansible framework.

• License: Free software under Apache 2.0 License
• Documentation: Ansible PAN Documentation
• Community support page: Palo Alto Networks Live

Role / Collection Compatibility

The Palo Alto Networks PAN-OS Ansible modules were previously available as an Ansible Galaxy role. Starting from Ansible 2.9, developers are encouraged to use collections for better organization and distribution. You can find the new collection here: Ansible Galaxy Collection.

Version 1.0 of this collection is a direct transfer of the previous Ansible Galaxy role version 2.4.0. If you are using Ansible 2.9 or newer, you can switch to this collection without changing how it works. Simply specify the collections section, remove PaloAltoNetworks.paloaltonetworks from the roles section, and you’re all set!

Now that the collection is live, no new features will be added to the old role. Future development will focus on the new collection. Users are encouraged to upgrade to Ansible 2.9 and use the new collection for the latest features and fixes.

Installation

The best way to install the modules is to use the Palo Alto Networks Ansible Galaxy role:

$ ansible-galaxy install PaloAltoNetworks.paloaltonetworks

Older modules are included in the standard Ansible distribution available at:

Ansible Modules for PAN-OS

You can also access the code under an Apache 2.0 license from the Palo Alto Networks GitHub repository to see upcoming releases:

Palo Alto Networks Ansible repository

Sample Playbooks

Examples of playbooks can be found in the /examples directory of this repository, for example: /examples/fw_dag.yml.

More detailed playbooks are available in the /ansible-playbooks/ directory.

Ansible Galaxy Role

The project contains Ansible modules that help automate tasks for Palo Alto Networks Next Generation Firewalls, using API calls within the Ansible framework.

Palo Alto Networks Ansible GitHub

Support

This project is provided with limited support on a best-effort basis. The scripts are community-supported, and Palo Alto Networks will help when possible. However, we do not offer technical support for using or troubleshooting these components through our normal support channels. The VM-Series firewall used by these scripts is still supported, but only for product functionality, not for deploying or using the scripts themselves.

Unless clearly stated otherwise, all projects on our GitHub repository (at Palo Alto Networks GitHub) or on sites other than our official Downloads page (Palo Alto Networks Support) are provided under this best-effort support policy.