type=xml‐issue - PaloAltoNetworks/pan-os-php GitHub Wiki

display Palo Alto Networks XML configuration file issues:

Palo Alto Networks Panorama or FW config can include XML issues, which were caused during CLI object / rule creation. With PAN-OS 10.x, Palo Alto Networks is now finally forcing you do remove duplicate member entries in address-/service-group.

To find all these duplicate entries and remove it in an automated fashion this is ONLY possible with PAN-OS-PHP:

• PAN-OS 10.x behaviour change: Palo Alto Networks docs

pan-os-php type=xml-issue in=api://MGMT-IP out=output.xml | tee log.txt

• of course the output.xml must be loaded back into the device.

pan-os-php type=upload in=output.xml out=api://MGMT-IP loadafterupload

These plain XML issues can NOT be send back via PAN-OS API or CLI set commands.