topic Assistance with Cortex XSOAR and Firewall Integration in Cortex XSOAR Discussions

Assistance with Cortex XSOAR and Firewall Integration

J.X570892 — Tue, 07 Jan 2025 13:50:37 GMT

Hi guys,

I have a question regarding the integration of Cortex XSOAR with a firewall. Could anyone guide me on how to set this up? Additionally, if there are any reference materials or documentation that could assist.

I would greatly appreciate it if you could share them.

Thanks in advance for your help!

Re: Assistance with Cortex XSOAR and Firewall Integration

JStephan — Tue, 07 Jan 2025 13:56:17 GMT

Hey there,

which firewall are we talking about?

I would say hop over to the marketplace and check if your firewall is available

https://cortex.marketplace.pan.dev/marketplace/?category=Network+Security&marketplace=Cortex+XSOAR

If you find it

install the integration on XSOAR
configure the integration
and start creating or using a playbook befitting your use case

If you cant find your firewall, well than we depend on the use case.

For example XSOAR can offer a dynamic list (EDL) which you could use to feed a block/allow list on your firewall

https://cortex.marketplace.pan.dev/marketplace/details/EDL/

Re: Assistance with Cortex XSOAR and Firewall Integration

J.X570892 — Tue, 07 Jan 2025 14:29:09 GMT

Could you please provide a walkthrough on integrating Palo Alto firewall with XSOAR, including the configuration of EDR and notification forwarding?

Re: Assistance with Cortex XSOAR and Firewall Integration

JStephan — Tue, 07 Jan 2025 14:40:55 GMT

Well, that could take a bit too long 🙂

But maybe you want to start here:

https://cortex.marketplace.pan.dev/marketplace/details/PANOS/

and check out the webinars
https://live.paloaltonetworks.com/t5/customer-success-webinars/tkb-p/Cortex_XSOAR_Trainings