---
id: pan-os-python
version: "1.13.1"
license: ISC
license_treatment: permissive
maintenance: active
---

# pan-os-python — Framework for interacting with Palo Alto Networks devices via API

License: permissive · Maintenance: active · Downloads: 114.1K/mo

## What it is and what it does

pan-os-python is an object-oriented SDK that lets you interact with Palo Alto Networks firewalls and Panorama appliances programmatically. Instead of logging into the web GUI or CLI, you write Python code to create, modify, and query device configurations and run operational commands. The SDK models the device's configuration hierarchy as Python objects and handles the underlying API calls for you.

It's designed for automation tasks: provisioning interfaces, managing security policies, running diagnostics, and orchestrating changes across single devices or Panorama-managed fleets. The package is stable, actively maintained, and already in production use. It depends only on pan-python for HTTP communication, keeping installation straightforward.

Use it for:

- Automate firewall interface and network configuration during infrastructure provisioning.
- Batch-manage security policies and rules across multiple firewalls via Panorama.
- Query device status, system info, and operational metrics for monitoring or compliance audits.
- Integrate firewall configuration into CI/CD pipelines for infrastructure-as-code workflows.
- Implement high-availability failover logic or retry mechanisms during device maintenance.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Framework for programmatically configuring and managing Palo Alto Networks firewalls and Panorama devices via API, with object-oriented access to device configuration and operational commands.

Yes, if you manage Palo Alto Networks devices and need programmatic control. The package is stable, actively maintained, has low install friction, and carries a permissive license. No known security vulnerabilities. Only caveat: you must have network access to a compatible PAN-OS device with API credentials to use it meaningfully.

## Install

pip install pan-os-python
uv add pan-os-python
poetry add pan-os-python

## Installing pan-os-python

Before you install: Low friction installation with a single pure-Python dependency. Actively maintained with recent releases; marked stable and used in production environments.

License in practice: ISC license is permissive, allowing commercial and private use with minimal restrictions.

Quickstart:

pip install pan-os-python

import pan-os-python

from pan-os-python import firewall, network

fw = firewall.Firewall("10.0.0.1", api_username="admin", api_password="admin")
eth1 = network.EthernetInterface("ethernet1/1", mode="layer3")
fw.add(eth1)
eth1.create()
fw.commit()

Requires network connectivity to a Palo Alto Networks device (physical or virtualized firewall or Panorama) with API access enabled and valid credentials.

Verify before relying:

- Whether the package supports all current PAN-OS versions and device models.
- Performance characteristics when managing large-scale deployments or high-availability pairs.
- Compatibility with Panorama as a proxy for managing multiple firewalls at scale.

## Package facts

- License: ISC (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 114.1K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

palo alto networks firewall api, pan-os device management python, firewall configuration automation, panorama api sdk, network device provisioning, panos firewall control, firewall-management, network-automation, palo-alto-networks

[View on SkillFed](https://skillfed.io/packages/pan-os-python) · [View on PyPI](https://pypi.org/project/pan-os-python/)