Pulling complete rule-base from palo alto firewall

[Gopiprashanthraju]

Is your feature request related to a problem?

I have around 100s of firewalls running I'm looking to automate rule addition on them but logging into panorama and fetching all of them is draining panorama resources it would be great if we can fetch all rules from Panos palo alto itself for each firewalls similar to the output we get when executed rule base command

Describe the solution you'd like

Describe alternatives you've considered

Additional context

[nikolay-matveev-kkr]

I am curious what prevents you from fetching all rules via Panorama? (I suppose you manage all your firewalls via Panorama)

All you need to do is instantiate a Panorama() instance, then instantiate the target DeviceGroup() (that contains the firewalls of interest), then associate it with the Panorama instance, then create PreRulebase() and PostRulebase() and associate them to the device group. After that you can pull any rules you want (for example, current_security_rules_pre = SecurityRule.refreshall(rulebase_pre))