Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration

Wassif — Thu, 22 Feb 2024 11:25:00 GMT

I'm seeking assistance on securely establishing an SSH connection from Cortex XSOAR to Panorama as part of the integration Prisma Access with XSOAR. This integration aims to execute CLI commands on Panorama, which is hosted within Azure (internally). To ensure security and avoid exposing Panorama to the internet, I'm looking for best practices or configurations involving intermediary services or agents within Azure or XSOAR. Any documentation or recommendations on how to securely facilitate this connection would be greatly appreciated.

Re: Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration

MichaelHinderman — Thu, 22 Feb 2024 14:57:02 GMT

Hello,

It sounds like you will need to leverage an XSOAR engine to allow your XSOAR instance, assuming your instance is hosted, to talk to services within you network.

In short, an XSOAR Engine is a reverse proxy that maintains an open connection between XSOAR and itself. The engine will initiate all network communication outward, so you will not need to expose any ports. Once the connection has been made, XSOAR is able to use that pipe to execute commands on the engine, and results will be returned back to XSOAR. You can read more about engines here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Engines

topic Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration in Cortex XSOAR Discussions

Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration

Re: Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration