topic Re: how to integrate paloalto firewall with Cortex XSOAR in General Topics

how to integrate paloalto firewall with Cortex XSOAR

syafeera90 — Thu, 03 Sep 2020 07:37:45 GMT

Hi,

I have setup Cortex XSOAR. However, i'm still confuse what i can do with this platform.. Someone said, i can integrate my Paloalto Firewall with Cortex XSOAR... Is there anyone here, know how to integrate my Palo alto firewall with Cortex XSOAR?

Re: how to integrate paloalto firewall with Cortex XSOAR

BPry — Thu, 03 Sep 2020 16:32:56 GMT

@syafeera90,

The integration itself is pretty easy since it just uses the API primarily. You just need to go into integrations and servers & services and add a new integration instance. This will ask for the URl, port, API key and everything else it needs for access. Once it's added, there's a lot of different things you can add into your playbooks.

Re: how to integrate paloalto firewall with Cortex XSOAR

syafeera90 — Fri, 04 Sep 2020 00:03:07 GMT

@BPry Hye thank you for assist me, btw, how to get API key from Palo-alto firewall? What i know, we need to enable it at palo alto portal right?

paloalto portal > Assets >site license s tab > add site license > enter authorization code.

If we enable the license, is it effect our production for Palo alto Firewall? how do we get authorization code?

Re: how to integrate paloalto firewall with Cortex XSOAR

syafeera90 — Fri, 04 Sep 2020 00:10:11 GMT

@BPry what port do i need to configure at the add instance form? Then, do i need to configure any port at my palo alto firewall?

Re: how to integrate paloalto firewall with Cortex XSOAR

RSumalal — Sat, 16 Oct 2021 11:42:59 GMT

Hello

I have a query with respect to PaloAlto firewall integration with Cortex XSOAR, there is no firewall based commands listing or showing as built in.

Its only listing panorama based commands when I go to the integrated firewall instance. How can I get firewall based commands into Cortex XSOAR platform or make it available?