StudyToCert

All certifications / NGFW Engineer / Lessons

Palo Alto Networks Certified Next-Generation Firewall Engineer NGFW-Engineer · Domain 3: Integration and automation

PAN-OS XML API (keygen, config, op, commit) and REST API; API-only admin role profiles

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Everything you do in the web interface is ultimately an API call, and PAN-OS exposes two APIs for automation. The XML API is the older, comprehensive one, covering configuration, operational commands, commits, logs, reports, User-ID and file transfers. The REST API offers JSON-based access to policies, objects, network and device configuration. Both run over HTTPS on the management interface, or a data interface whose management profile allows HTTPS. Automation matters because it makes repeated changes consistent and lets security tools react faster than a human can.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study NGFW Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the NGFW Engineer study plan