How to import IP address in bulk to Palo Alto Firewall

***Prepare Text file with all the address needed,

set address test ip-netmask 10.0.0.1
set address test2 ip-netmask 10.0.0.2
set address test33 ip-netmask 10.0.0.3

***SSH into PA CLI and enter configure, Now past the what you copied from text file. You can enter ” show address” to see added address

***If you want to add thses to address group same as before prepare text file and enter those to CLI

set address-group MyCustomAddressGroup static test
set address-group MyCustomAddressGroup static test2

***Enter "commit” to commite the changes

***See the address group “show address-group”

More info https://live.paloaltonetworks.com/t5/general-topics/how-to-import-address-objects-in-csv-to-pa-firewall/td-p/453559

Leave a comment