9.1 和 10.2 之间使用 API 的安全规则设置命令的语法有何区别？
2567
Created On 06/16/23 00:28 AM - Last Modified 01/07/25 19:21 PM
Question
9.1 和 10.2 之间使用 API 的安全规则设置命令的语法有何区别？
Environment
- PA 系列下一代防火墙
- PAN OS 9.1、10.2
- XML API
Answer
There are differences in the rule set between PAN-OS 9.1 and 10.2.
Example given below
PAN OS 9.1：
- 用一个臀部轮廓标签指定。
[HIP标签]
<hip-profiles><member>any</member></hip-profiles>
[例子]
curl https://[WebUIIP]/api/? --data "key=[Key]&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='rule1']&element='<to><member>any</member></to><from><member>any</member></from><source><member>any</member></source><destination><member>any</member></destination><source-user><member>any</member></source-user><category><member>any</member></category><application><member>any</member></application><service><member>any</member></service><action>allow</action><hip-profiles><member>any</member></hip-profiles>'"
PAN OS 10.2：
- 它由两个 hip-profile 标签（源和目标）指定。
[HIP标签]
<source-hip><member>any</member></source-hip><destination-hip><member>any</member></destination-hip>
[例子]
curl https://[WebUIIP]/api/? --data "key=[Key]&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='rule1']&element='<to><member>any</member></to><from><member>any</member></from><source><member>any</member></source><destination><member>any</member></destination><source-user><member>any</member></source-user><category><member>any</member></category><application><member>any</member></application><service><member>any</member></service><action>allow</action><source-hip><member>any</member></source-hip><destination-hip><member>any</member></destination-hip>'"
Additional Information
注意：这是一个特定命令。其他命令也可能不同。请参阅 API 文档以了解具体版本。