Palo Alto Networks Remote Networks API

The Remote Networks API from Palo Alto Networks — 4 operation(s) for remote networks.

Business capability
IT Infrastructure Management BC-600.50

Operations 17

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

DELETE /v1/remote-networks Bulk delete remote network IPSec tunnels · Bulk delete IPSec tunnels #
Ask an LLM
“Can I remove a whole set of IPSec tunnels sharing a prefix?”
“Can I bulk delete remote networks for just one sub-tenant?”
Tell an agent destructive · confirm first
Delete all remote network tunnels with prefix {remote_networks_prefix}.
Bulk remove tunnels {Name} under prefix {remote_networks_prefix}.
GET /v1/remote-networks Check a remote network tunnel job's status · Get IPSec tunnel details #
Ask an LLM
“How do I check whether my bulk IPSec tunnel create, modify or delete finished?”
“What happened to the remote networks tunnel request I submitted?”
Tell an agent
Get the IPSec tunnel job details for request {id}.
Check the status of bulk tunnel change request {id}.
POST /v1/remote-networks Bulk create remote network IPSec tunnels · Create IPSec tunnels #
Ask an LLM
“How do I create a batch of new IPSec tunnels for my branch sites?”
“Can I bulk-provision remote network tunnels for a Panorama sub-tenant?”
Tell an agent
Create remote network IPSec tunnels {remote_networks_ipsec_tunnels} with name suffix {name}.
Bulk create new branch tunnels named {name} for sub-tenant {SubTenantName}.
PUT /v1/remote-networks Bulk modify remote network IPSec tunnels · Modify IPSec tunnels #
Ask an LLM
“Can I modify many remote network IPSec tunnels in one request?”
“Can I change tunnels for just one sub-tenant in a Panorama multi-tenant setup?”
Tell an agent
Modify the remote network IPSec tunnels with suffix {name}.
Bulk update tunnels {remote_networks_ipsec_tunnels} under suffix {name} for sub-tenant {SubTenantName}.
GET /v1/remote-networks-read Read IPSec tunnel status results · Read IPSec tunnel details #
Ask an LLM
“Where do I pick up the tunnel status results from a read request I queued?”
“Where do I see the current state of IPSec tunnels by request UUID?”
Tell an agent
Read the IPSec tunnel status for read request {id}.
Fetch the tunnel status results queued under {id}.
POST /v1/remote-networks-read Request a read of IPSec tunnels · Request to read IPSec tunnels #
Ask an LLM
“Can I ask for the status of specific remote network tunnels?”
“Can I queue a status read for a list of remote network names?”
Tell an agent
Request a status read for remote networks {remote_networks_names}.
Queue a tunnel read for sub-tenant {SubTenantName}.
GET /remote-networks List Prisma Access remote networks · Palo Alto Networks List Remote Networks #
Ask an LLM
“Which branch and data center sites are connected to Prisma Access as remote networks?”
“Can I list Prisma Access remote networks without naming a folder?”
Tell an agent
List all Prisma Access remote networks in the tenant.
Show Prisma Access remote networks in location {location} with status {status}.
POST /remote-networks Create a Prisma Access remote network · Palo Alto Networks Create Remote Network #
Ask an LLM
“How do I connect a new branch office to Prisma Access as a remote network?”
“Do I need to push the config after creating a Prisma Access remote network?”
Tell an agent
Create Prisma Access remote network {name} in location {location} with subnets {subnets} over IKE gateway {ike_gateway}.
Add a Prisma Access branch site {name} at {location}, local subnets {subnets}, gateway {ike_gateway}, capped at {bandwidth_mbps} Mbps.
GET /remote-networks/{id} Get a remote network's tunnel configuration · Palo Alto Networks Get Remote Network #
Ask an LLM
“What IKE gateway and subnets are configured for one branch tunnel?”
“Where can I view the full config of a single remote network?”
Tell an agent
Get remote network {id}.
Show the tunnel configuration of branch network {id}.
PUT /remote-networks/{id} Update a Prisma Access remote network · Palo Alto Networks Update Remote Network #
Ask an LLM
“How do I change the compute region of a Prisma Access remote network in the candidate config?”
“Can I update the local subnets for an existing Prisma Access branch site?”
Tell an agent
Update Prisma Access remote network {id} with name {name} and location {location}.
Change Prisma Access site {id} ({name}, {location}) to subnets {subnets} on IKE gateway {ike_gateway}.
DELETE /remote-networks/{id} Delete a remote network and tear down its tunnel · Palo Alto Networks Delete Remote Network #
Ask an LLM
“What happens to the IPsec tunnel when I delete a single remote network?”
“Can I decommission one branch office connection?”
Tell an agent destructive · confirm first
Delete remote network {id}.
Tear down the tunnel for branch network {id}.
POST /remote-networks/{id}/refresh-ike-gateway Refresh a remote network's IKE gateway · Palo Alto Networks Refresh IKE Gateway #
Ask an LLM
“How do I re-establish a failed branch IPsec tunnel?”
“Do I need to refresh the IKE gateway after changing IKE parameters?”
Tell an agent
Refresh the IKE gateway for remote network {id}.
Re-establish the failed tunnel on branch {id}.
GET /sse/config/v1/remote-networks List remote networks in a folder (SSE config) · List remote networks #
Ask an LLM
“Which remote networks are configured in a given folder of the SSE config API?”
“Can I page through SSE remote networks in a folder with a limit and offset?”
Tell an agent
List SSE config remote networks in folder {folder}.
Find the SSE remote network named {name} in folder {folder}.
POST /sse/config/v1/remote-networks Create a remote network via SSE config · Create remote networks #
Ask an LLM
“How do I create a remote network with ECMP tunnels through the SSE config endpoint?”
“What license type and region does a new SSE remote network require?”
Tell an agent
Create SSE remote network {name} in folder {folder}, region {region}, license {license_type}.
Add SSE remote network {name} in {folder} ({region}, {license_type}) using IPSec tunnel {ipsec_tunnel}.
DELETE /sse/config/v1/remote-networks/{id} Delete a remote network (SSE config) · Delete a remote network #
Ask an LLM
“How do I delete a remote network through the SSE config API?”
“Can I remove an SSE remote network by its UUID?”
Tell an agent destructive · confirm first
Delete SSE config remote network {id}.
Remove SSE remote network {id} from the configuration.
GET /sse/config/v1/remote-networks/{id} Get a remote network by ID (SSE config) · Get a remote network #
Ask an LLM
“What is the configuration of one remote network in the SSE config API?”
“Can I fetch an SSE remote network's tunnels and subnets by its UUID?”
Tell an agent
Get SSE config remote network {id}.
Show the tunnels and subnets of SSE remote network {id}.
PUT /sse/config/v1/remote-networks/{id} Edit a remote network (SSE config) · Edit a remote network #
Ask an LLM
“How do I change the subnets or secondary tunnel on an SSE remote network?”
“Can I turn on ECMP load balancing for an existing SSE remote network?”
Tell an agent
Edit SSE remote network {id}: name {name}, region {region}, license {license_type}, subnets {subnets}.
Set secondary IPSec tunnel {secondary_ipsec_tunnel} on SSE remote network {id} ({name}, {region}, {license_type}).

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-remote-networks-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-remote-networks-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Palo Alto Networks Remote Networks API
  x-refined-note:
  - x-audience differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Remote Networks across 3 of this provider''s published API definitions: palo-alto-sase-config-orch-paloaltonetworks-remote-networks-openapi.yaml, palo-alto-sase-config-orchestration-api-openapi-original.yml, palo-alto-scm-config-sase-deployment-deployment-services-june-openapi.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.sase.paloaltonetworks.com
- url: https://api.sase.paloaltonetworks.com/config-orchestration/v1
  description: SASE Configuration Orchestration API production server.
- url: https://api.strata.paloaltonetworks.com/config/deployment/v1
  description: Current
- url: https://api.sase.paloaltonetworks.com/sse/config/v1
  description: Legacy
tags:


# --- truncated at 32 KB (88 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-remote-networks-api-openapi.yml