>
    API Examples for Retrieving Prisma Access IP Addresses
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Setup
    4. API Examples for Retrieving Prisma Access IP Addresses
    Download PDF
    Prisma Access

    API Examples for Retrieving Prisma Access IP Addresses

    Table of Contents

    API Examples for Retrieving Prisma Access IP Addresses

    Shows the examples of what you need to enter to run your API commands.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Panorama)
    • Prisma Access license
    Use the following examples when entering keywords and arguments in the .txt file for the API command to retrieve infrastructure IP addresses. To change the output of the command, change the options in the .txt file; the command itself does not change.
    Retrieve These IP AddressesSpecify These Parameters in the .txt FileComments
    Mobile User IP Addresses
    All mobile user IP Addresses
      {
"serviceType": "gp_gateway",
"addrType": "all",
"location": "all"
   }
    An addrType of all means that Prisma Access retrieves all IP addresses for the locations you selected Set Up GlobalProtect Mobile Users (Panorama).
    A location of all means that Prisma Access retrieves IP addresses for all available locations, including ones that you have not onboarded. Prisma Access reserves non-onboarded location IP addresses so that you can add these IP addresses to your allow lists before you onboard them.
    IP addresses for onboarded mobile user locations
      {
"serviceType": "gp_gateway",
"addrType": "all",
"location": "deployed"
   }
    Or
      {
"serviceType": "gp_gateway",
"addrType": "active",
"location": "deployed"
   }
    A location type of deployed means that Prisma Access retrieves only the IP addresses for the locations that you onboarded.
    Use either an addrType of all or active to retrieve these gateway IP addresses.
    Remote Network IP Addresses
    Retrieve all remote network IP addresses
      {
"serviceType": "remote_network",
"addrType": "all",
"location": "all"
   }
    This command retrieves the public and egress IP addresses of remote networks you have onboarded. Do not use a location of deployed. You can use an addrType of active but it retrieves the same addresses as if you specified an addrType of all.
    Clean Pipe IP Addresses
    Retrieve all clean pipe IP addresses
      {
"serviceType": "clean_pipe",
"addrType": "all",
"location": "all"
   }
    This command retrieves the public and egress IP addresses of clean pipes you have onboarded. Do not use a location of deployed. You can use an addrType of active but it retrieves the same addresses as if you specified an addrType of all.
    Explicit Proxy IP Addresses
    Retrieve the ACS IP addresses for deployed locations
    		 
    {
"serviceType": "swg_proxy",
"location": "all",
"addrType": "all"
}
    This command retrieves the egress IP addresses for each deployed Explicit Proxy location, the authentication cache service (ACS), and the network load balancers (relevant for explicit proxy deployments only).
    Remote Browser Isolation IP Addresses
    Retrieve the Remote Browser Isolation (RBI) IP addresses for deployed locations
    		 
      {
"serviceType": "rbi",
"location": "all",
"addrType": "all"
  }
    This command retrieves the egress IP addresses for each deployed RBI location. You can add these IP addresses to an allow list to connect to SaaS Applications.

    © 2024 Palo Alto Networks, Inc. All rights reserved.