AliZeroTrust

Palo Alto Address Group Builder

Paste a list of IPs, name the group, get ready-to-paste PAN-OS CLI to create the address objects and the group in one shot.

PAN-OS · set-format CLI

Inputs

1 · define

Used as-is in set address-group. No spaces — PAN-OS will reject them.

One IP per line, or several separated by commas on one line — both can be mixed. Plain IPs, CIDR (/24), or IP name to set a custom object name. Blank lines and # comments are skipped.

Object naming
Output options

The generated set commands only work in configuration mode (prompt ends in #, not >). Leave the box above checked unless you're pasting into a script that already runs configure itself.

Generated script

2 · run
Fill in the fields on the left and click Generate CLI — the script will appear here.
Paste the steps one at a time into the CLI on the target firewall, waiting for the prompt to return between pastes. Long lists are split into small steps because PAN-OS can reject lines from a very large single paste. Object names are shortened to PAN-OS's 63-character limit automatically. Address inputs and command output are processed locally in your browser.
Last updated: 12 October 2026

Data processing & privacy

The tools process entered addresses and generate results locally in your browser. They do not send inputs or results to a server.

Cloudflare hosts this website and receives the connection information required to deliver its pages. Cloudflare Web Analytics collects aggregate usage and performance metrics without analytics cookies or visitor fingerprinting.

Results are copied or downloaded only when you choose to do so. Always review generated configuration before applying it.