Release v2.4.1

V2.4.1

• Released: 2020-02-27

Bug Fixes:

• panos_aggregate_interface
• panos_match_rule

Release v2.4.0

V2.4.0

• Released: 2020-01-17

New modules:

• panos_pbf_rule
• panos_gre_tunnel
• panos_nat_rule_facts

Enhancements:

• panos_aggregate_interface has had its params fixed
• panos_ike_gateway does not force peer_id_check anymore
• panos_software has new flags allowing just download or just install
• panos_object_facts has new search options
• Various bug and doc fixes / updates

Release v2.3.0

New modules:

• panos_virtual_wire
• panos_aggregate_interface
• panos_ha

Enhancements:

• panos_op now reports changed=False for safe commands
• panos_l3_subinterface can now create aggregate subinterfaces
• panos_commit can now perform partial commits
• panos_type_cmd now reports changed=False for safe commands
• panos_bgp now supports enable and disable as states
• panos_match_rule should now work with rules that came from Panorama

Bug Fixes:

• panos_ike_gateway
• panos_mgtconfig
• panos_bgp_auth
• panos_vlan

Release v2.2.3

V2.2.3

• Released: 2019-07-09

Bug fixes:

• Fixed create_default_route handling with both panos_interface
  and panos_l3_subinterface

Release v2.2.2

V2.2.2

• Released: 2019-06-18

Bug fixes:

• Fixed module handling when targeting Panorama template stacks

Release v2.2.1

V2.2.1

• Released: 2019-06-12

Bug fixes:

• Fixed panos_l3_subinterface DHCP handling to match panos_interface

Release v2.2.0

V2.2.0

• Released: 2019-06-11

New modules:

• panos_zone_facts
• panos_ipsec_ipv4_proxyid
• panos_virtual_router_facts
• panos_l3_subinterface
• panos_l2_subinterface
• panos_log_forwarding_profile
• panos_log_forwarding_profile_match_list
• panos_log_forwarding_profile_match_list_action
• panos_email_profile
• panos_email_server
• panos_snmp_profile
• panos_snmp_v2c_server
• panos_snmp_v3_server
• panos_syslog_profile
• panos_syslog_server
• panos_http_profile
• panos_http_profile_header
• panos_http_profile_param
• panos_http_server
• panos_type_cmd

Enhancements:

• panos_security_rule_facts can now return full policy info.

Bug fixes:

• Added module encoding to all modules.
• Various documentation fixes.

Release v2.1.2

V2.1.2

• Released: 2019-05-24

Enhancements:

• panos_registered_ip_facts can now filter on IP addresses (in addition to tags)
• All modules: Panorama commits can now still push to a device group even if a Panorama
  commit is unnecessary
• panos_nat_rule: Changed the default location to unspecified instead of bottom

Bug fixes:

• panos_bgp: Added the "state" param to this module
• panos_facts: Corrected virtual router output name to use underscores

Release v2.1.1

V2.1.1

• Released: 2019-05-08

• Status: Released

• Minor bug fix with panos_op

• Documentation tweaks

Release v2.1.0

New modules:

• panos_security_rule_facts
• panos_vlan
• panos_vlan_interface

The following shorthand applies to this version's updates:

• provider - Any module below that lists a change of provider means that
  it supports a new provider dict for PAN-OS authentication credentials in
  addition to the old ip_address / username / password / api_key. Additionally
  these modules now support Panorama to firewall connections, performed by specifying
  Panorama IP address, username, and password, then specifying a firewall's serial
  number using the serial_number param in the provider dict.
• removed operation - This module has had the old operation param removed in favor
  of state. Please update your playbooks to use state instead.
• template support - This module now supports Panorama templates.
• full template support - This module now supports both Panorama templates and
  template stacks.
• vsys support - This module now includes support for specifying the firewall vsys.
• checkmode - This module now supports Ansible's check mode.

Given the above shorthand, the following modules have been updated as follows:

• panos_address_group: provider; checkmode
• panos_address_object: provider; checkmode
• panos_administrator: provider; full template support; checkmode; Now supports
  supplying the password hash directly
• panos_api_key: provider
• panos_bgp: provider; full template support; checkmode
• panos_bgp_aggregate: provider; full template support; checkmode
• panos_bgp_auth: provider; full template support; checkmode; replace is
  deprecated as this is now the default behavior for state=apply
• panos_bgp_conditional_advertisement: provider; full template support;
  checkmode; advertise_filter and non_exist_filter have been deprecated,
  add filters using panos_bgp_policy_filter instead
• panos_bgp_dampening: provider; full template support; checkmode
• panos_bgp_peer: provider; full template support; checkmode
• panos_bgp_peer_group: provider; full template support; checkmode
• panos_bgp_policy_filter: provider; full template support; checkmode;
  "state=return-object" has been deprecated, just use states of absent/present
  like other modules as normal; address_prefix can now be a dict with
  "name"/"exact" keys or a string
• panos_bgp_policy_rule: provider; full template support; checkmode;
  address_prefix can now be a dict with "name"/"exact" keys or a string
• panos_bgp_redistribute: provider; full template support; checkmode
• panos_check: provider; fixed #183; fixed #311
• panos_commit: provider; added include_template param; devicegroup is
  deprecated, use device_group instead
• panos_facts: provider; fixed bug when running against VM NGFW; host has
  been removed, use provider instead
• panos_ike_crypto_profile: provider; full template support; checkmode
• panos_ike_gateway: provider; full template support; checkmode; many params
  have been aliased to new param names to better match the pandevice naming
• panos_interface: provider; template support; checkmode; removed operation;
  fixed #193; fixed #266; fixed #267; vsys_dg is deprecated, use vsys instead
• panos_ipsec_profile: provider; full template support; checkmode
• panos_ipsec_tunnel: provider; full template support; checkmode; many new
  params added to support missing functionality added in, please refer to the
  module documentation for the complete list of params now supported
• panos_lic: provider; added new output licenses
• panos_loopback_interface: provider; template support; checkmode; vsys_dg is
  deprecated; use vsys instead
• panos_management_profile: provider; full template support; checkmode;
  panorama_template is deprecated, use template instead
• panos_match_rule: provider; vsys_id is deprecated, use vsys; fixed #248;
  output stdout_lines is deprecated, use rule instead (note: this has a
  different format, so please update your playbooks)
• panos_mgtconfig: provider; checkmode; devicegroup is removed as this param
  was not doing anything; added verify_update_server
• panos_nat_rule: provider; removed operation; checkmode; devicegroup is
  deprecated, use device_group; tag_name (string type) is deprecated, use
  tag (list type); added enable and disable types for the state param
• panos_object_facts: provider; added support for name regexes and a new
  objects output
• panos_op: provider
• panos_pg: provider; added Panorama support; added state
• panos_redistribution: provider; full template support; checkmode
• panos_registered_ip: provider; vsys support; checkmode
• panos_registered_ip_facts: provider; vsys support
• panos_restart: provider
• panos_security_rule: provider; removed operation; checkmode; devicegroup
  is deprecated, use device_group instead
• panos_service_group: provider; checkmode
• panos_service_object: provider; checkmode
• panos_software: provider; checkmode
• panos_static_route: provider; full template support; added nexthop type
  of "next-vr"
• panos_tag_object: provider; checkmode
• panos_tunnel: provider; template support; checkmode; vsys_dg is deprecated,
  use vsys instead
• panos_userid: provider; removed operation; state added as a param
• panos_virtual_router: provider; full template support; checkmode
• panos_zone: provider; full template support; checkmode

Generic updates across all modules mentioned above:

• The minimum version of pandevice to run all "provider" modules is 0.9.1
• Cleaned up module documentation

The following modules have been deprecated:

• panos_admin
• panos_dag
• panos_query_rules
• panos_sag

The following modules have not been modified:

• panos_admpwd
• panos_cert_gen_ssh
• panos_dag_tags
• panos_import
• panos_loadcfg
• panos_object