palo-create-security-rule.yaml

# FILENAME
# playbook to create a new policy and apply to the firewall
## DESCRIPTION
# Example playbook that will connect to the firewall using credentials provided saved in either host.yaml or vars.yaml files and create security rule
## REQUIREMENTS
# pip install ansible
# ansible-galaxy install PaloAltoNetworks.paloaltonetworks
## EXECUTE
# ansible-playbook palo-create-security-rule.yaml

---
- name: Palo Alto Provision 
  hosts: PA-FW-01
  connection: local
 
  collections:
    - paloaltonetworks.panos
 
  tasks: 
    - name: Add test rule 1 to the firewall
      panos_security_rule:
        provider: "{{ provider }}"
        rule_name: 'Ansible-test-1'
        description: 'An Ansible test rule'
        source_zone: ['internal']
        destination_zone: ['external']
        source_ip: ['1.2.3.4']
        source_user: ['any']
        destination_ip: ['any']
        category: ['any']
        application: ['any']
        service: ['service-http']
        hip_profiles: ['any']
        action: 'allow'
        commit: False
...