Ansible collection for PAN-OS

PAN-OS Ansible Collection


Ansible collection that automates the configuration and operational tasks on Palo Alto Networks Next Generation Firewalls, both physical and virtualized form factors, using the PAN-OS API.

Tested Ansible Versions

This collection is tested with the most current Ansible 2.9 and 2.10 releases. Ansible versions before 2.9.10 are not supported.


Install this collection using the Ansible Galaxy CLI:

ansible-galaxy collection install paloaltonetworks.panos


Either refer to modules by their full FQCN or use the collections specification in your playbooks:

    - paloaltonetworks.panos

  - name: Get the system info
      provider: '{{ provider }}'
      cmd: 'show system info'
    register: res

  - debug:
      msg: '{{ res.stdout }}'

Role / Collection Compatibility

The Palo Alto Networks PAN-OS Ansible modules were previously distributed as an Ansible Galaxy role ( Since Ansible 2.9, RedHat has urged developers to migrate to collections to organize and distribute their integrations.

The 1.0 version of this collection is a straight port of the Ansible Galaxy role v2.4.0. If you are using Ansible 2.9 or later and you are using the role, then you can safely use this instead with no change in functionality. Just specify the collections spec (as mentioned above in the Usage section), remove PaloAltoNetworks.paloaltonetworks from the roles spec, and you're done!

Python Compatibility

As Ansible still wants to support python2, this collection will still work under python2.


This template/solution is released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (the VM-Series firewall) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself.

Unless explicitly tagged, all projects or work posted in our GitHub repository (at or sites other than our official Downloads page on are provided under the best effort policy.

Developer Sites


Copyright © 2021 Palo Alto Networks, Inc. All rights reserved.