Tools

Tools

The Tools page offers a range of resources for integrating Palo Alto Networks products to enhance the capabilities of the Security Operating Platform. Discover integration guides, scripts, and templates for solutions. These tools, contributed by Palo Alto Networks and the community, help streamline deployments, improve security operations, and simplify configuration migrations. Explore these valuable resources to optimize your Palo Alto Networks environment.

Browse the Community

Integration Resources

Palo Alto Networks partners and customers collaborate on topics related to integration on the Palo Alto Networks products for extending the capabilities of the Palo Alto Networks Security Operating Platform. Technology partners can integrate via an extensible platform by building apps on Cortex by Palo Alto Networks.

72 Posts

App for QRadar

Integrate QRadar with the Palo Alto Networks platform to streamline operations and improve security. The Palo Alto Networks app for QRadar allows the security team to reduce, prioritize, and correlate Palo Alto Networks events using the QRadar dashboard, enabling rapid response to the most critical threats from a single dashboard.

6 Posts

Cloud Integration

The scripts, templates and resources on this page are contributions from Palo Alto Networks and from the community at large – both customers and partners. They are intended to help streamline your deployment of the VM-Series in the public cloud and your virtualized data center.

3 Posts

Expedition

Expedition is the fourth evolution of the Palo Alto Networks Migration Tool. The purpose of this tool is to help reduce the time and efforts of migrating a configuration from a supported vendor to Palo Alto Networks.

1350 Posts

HTTP Log Forwarding

HTTP Log Forwarding was introduced in PAN-OS 8.0 to enable better integration between your firewall and IT infrastructure by triggering an action or initiating a workflow on an external HTTP-based service when a log is generated on the firewall.

34 Posts

Maltego for AutoFocus

Maltego is a data visualization tool which allows users to explore the relationships between entities interactively through Transforms. Transforms allow users to query disparate data sources and present a view of the retrieved data in a single view.

7 Posts

Can't import xml from any of my firewalls

Hello all,

I can't import any of the Exported Named Configuration Snapshots from any of my firewalls nor any of the exports from Panorama. Create a new project.

Click the Import Tab > Click Browse.

Select my .XML.

Expedition looks like it's impor

...

Important Update: End of Life Announcement for Palo Alto Networks Expedition

End of Life Announcement for Palo Alto Networks Expedition

Dear Valued Customer and Partner,

We are excited to share some great news with you, as a valued user of Expedition functionalities. We are currently in the process of transferring the core

...

Expedition Documentation

Here are all the Documents related to Expedition use and administrations

Installation Guide - Instructions to install Expedition 1 on an Ubuntu 20.04 Server and Transferring Projects between Expeditions
Hardening Expedition – Follow to secure your I

...

How to Import or Export a Project

Question

Can I export my project to another Expedition instance?

Answer

Yes you can!

Export a Project:

Warning: Only Expedition Super-Users can Import and Export Projects.

Login to your Expedition
Go to Projects Tab
Select the project you want t

...

How to Add a New Device to My Project

There is a time when you already started a project and then you need to import the configuration from one device you didn't created yet.

From the Expedition Dashboard, go to Devices and add the new device.
After generate the keys and import the cont

...

Expedition User Guide v1.2

What is Expedition?
Login
Login From the Web Interface
Changing default credentials
Let’s Migrate
Migration Workflow
Importing a configuration into the project
Project Dashboard
Remove Unused Objects
Fixing Invalid Services
Replace Services by App-ID
Remapping

...

IMPORTANT - We Want to Hear from You - Share your feedback for Expedition Tool

Expedition Community,

We request your feedback on the Expedition tool. This will help us to gain insight into your utilization of Expedition and understanding the aspects that are most important to you.

Please invest a quick 2 minutes to share your

...

Modifying Checkpoint FW Access Rule from Cortex XSOAR

Spoiler

We have the Checkpoint integration v2 on Cortex XSOAR and I tested 'checkpoint-access-rule-update' but we are not able to modify the intended access rule. The access rule is not a main rule but a sub-rule. for example, the rule number that we

...

Introducing Expedition 2 Beta

End of Life Announcement for Palo Alto Networks Expedition

We are excited to share some great news with you, as a valued user of Expedition functionalities. We are currently in the process of transferring the core functionalities of the tool into

...

Expedition unable to download Panorama Connected Devices

Greetings,

We recently upgraded our Panorama to 9.1.4 and built a new Expedition VM with version 1.1.80. While configuring the new Expedition server I have added our Panorama and downloaded the running configuration under 'Contents'. However, when

...

Expedition - Can you create a Custom URL Category Group

I am migrating a from a CP firewall that uses asterisks as Wildcards and I need to create a Custom URL Category in order to be able to migrate the URLs over to PAN-OS.

Is it possible to create Custom URL Categories in Expedition in order to allow th

...

Expedition version 4 - SRX to Palo Alto migration issue

I am using Expedition Version4.

SRX JunOs configs to PanOs migration, only few interfaces, zones and one VR(logging-vr) are getting migrated. Tool doesn't detect any security groups, address books, security policies...etc. We have hundreds of secu

...

Resolved! Checkpoint to Palo Alto

Hello,

I'm working on migrating a Checkpoint Firewall running R.81 to a Palo Alto using Expedition and after a few attempts and failures I started digging deeper into the objects configured on the Checkpoint. There are multiple "Domain Objects" whi

...

How to correct invalid services (from ASA)

Hi,

I'm migrating Cisco ASA security policies and showing some invalid services.

icmp-echo

icmp-traceroute

Please let me know the correct services and how to replace it in service groups.

Thanks,

Karun

Powershell to run CLI Command

Hi All!

I am putting together a PowerShell script to see what IPs are listed in the DoS Block Table. The command (debug dataplane show dos block-table) keeps timing out with the error

"Error executing command 'show config running'. Error: Exception cal

...