topic How to Disconnect a Firewall from Cortex Data lake and connect with XDR ? in Strata Logging Service Discussions

How to Disconnect a Firewall from Cortex Data lake and connect with XDR ?

Ariq_Aziz — Thu, 18 Apr 2024 18:33:34 GMT

We are migrating our devices from CDL to XDR. We connected our Prisma Access with the XDR and getting logs for the SD-WAN ion devices. Sincne On Prem Firewalls are connected with the existing CDL, im not getting proper documentation for shifting the onprem firewalls to XDR tenant.

The documents are not much helpful. They only mention straight forward tasks like generate OTP and add firewall. but my issue is I dnt see any firewalls available to connect in XDR.

MY understanding is that i have to disconnect it from CDL then i have to create new deivce cert so that it can connect with XDR.

Anyone done similar things ? Any reference will be helpful.

Thanks

ARIQ

Re: How to Disconnect a Firewall from Cortex Data lake and connect with XDR ?

jtalton — Tue, 16 Jan 2024 20:55:33 GMT

Hi Ariq_Aziz,

You will need to open a support case to disassociate the firewall from the CDL . Reference How to Open A Support Case

Also, please take a look at this how to video which walks through the steps of onboarding a PANW NGFW directly to Cortex XDR Pro. LIVEcommunity - Cortex XDR 3.6 Feature Review: NGFW Collection Integration - LIVEcommunity - 543367 (paloaltonetworks.com)

If you found this answer helpful please select Accept as Solution.

Thank you!

Re: How to Disconnect a Firewall from Cortex Data lake and connect with XDR ?

Ariq_Aziz — Tue, 16 Jan 2024 22:35:19 GMT

Thanks a lot mate ! you just saved the world. I have already opened a case. And thanks again for sharing that video. I was desperately looking for something like that. It seems that I'm on the right track and once my device gets dissociate from CDL, I will be able to connect with XDR 😁

Cheers

ARIQ