Tools | Palo Alto Networks

Browse the Community

Integration Resources

Palo Alto Networks partners and customers collaborate on topics related to integration on the Palo Alto Networks products for extending the capabilities of the Palo Alto Networks Security Operating Platform. Technology partners can integrate via an extensible platform by building apps on Cortex by Palo Alto Networks.

76 Posts

App for QRadar

Integrate QRadar with the Palo Alto Networks platform to streamline operations and improve security. The Palo Alto Networks app for QRadar allows the security team to reduce, prioritize, and correlate Palo Alto Networks events using the QRadar dashboard, enabling rapid response to the most critical threats from a single dashboard.

6 Posts

Cloud Integration

The scripts, templates and resources on this page are contributions from Palo Alto Networks and from the community at large – both customers and partners. They are intended to help streamline your deployment of the VM-Series in the public cloud and your virtualized data center.

3 Posts

Expedition

Expedition is the fourth evolution of the Palo Alto Networks Migration Tool. The purpose of this tool is to help reduce the time and efforts of migrating a configuration from a supported vendor to Palo Alto Networks.

1364 Posts

HTTP Log Forwarding

HTTP Log Forwarding was introduced in PAN-OS 8.0 to enable better integration between your firewall and IT infrastructure by triggering an action or initiating a workflow on an external HTTP-based service when a log is generated on the firewall.

34 Posts

Maltego for AutoFocus

Maltego is a data visualization tool which allows users to explore the relationships between entities interactively through Transforms. Transforms allow users to query disparate data sources and present a view of the retrieved data in a single view.

7 Posts

Resolved! No security policies showing in Expedition project

Hi! Installed Expedition on Ubuntu 20.04 with php7.4 cause 7.0 it not available now. When I import a ChechPoint config to migrate to PaloAlto, process takes very log on step 9 of 10, and nevers ends, but, in main dashboard appears to have imported objects and policy rules from the CKP config I can see the objects imported but I can NOT see the...

Expedition retirement

Now that Palo has yanked the repository that supported Expedition installs (or at least access to it), I apparently can't clean-sheet reinstall Ubuntu and Expedition even to the version I already have. My Expedition is starting to hang and up to a few months ago I could reinstall and it would work better for a few months.I'm in the middle of a ...

Cannot Login to Expedition UI Using Default Admin Account

Hello, I'm currently experiencing an issue with Palo Alto Networks Expedition. I am unable to log in to the UI using the default account credentials: Username: admin Password: paloalto I have read several related posts and articles, but none of the suggested solutions have resolved the issue so far.

Expedition 22.04

Hi all, Just thought that I would share this resource. Found someone online that has created a script to install expedition on 22.04. I did not create this so use it at your own risk. https://gist.github.com/myip4tfo/884915d569916e61205620c8e81fe974

Machine Learning support for newer PAN-OS Versions

Hello all As many of you may have noticed ML no longer works well with newer versions due to changes in log format, namely additions of new columns. I created a workaround that trims those additional columns that are not necessary for ML to work. It simply drops them using XSV and mimics the log format of 10.1.0

Expedition hangs while generating API requests

I'm utilizing Expedition for Machine Learning rule generation. The firewall is forwarding logs to Panorama and I'm able to generate the ML rules. After that I'm at the Export tab, and attempting to generate the XML or API requests. I'll take either one at this point, but they both hang at Generating Profiles vsys/dg:Service_Centers. Whether ...

Create custom widget to display data from JamfPro

Hi Everyone,GreetingsI'm wondering if it's possible to fetch data from JamfPro MDM solution for example user_name, ip address and mac details and add it as a custom widget to the cortex dashboard. If this is possible kindly guide me on how to achieve this.#cortexXDR

Expedition installation failed - apache2/php7 not installed

Hello all, to migrate from Fortinet to Palo Alto, I would like to use the Expedition Tool. I have completed the expedition installation on a virtual machine according to the installation guide, but the tool does not work. The GUI is not available. After analyzing the CLI output from the installation, I could see lots of warnings and errors, and ...

migrating asa to palo alto

Hi, I need to migrate cisco ASA 5520 to PA 3220. Can anyone please let me know how can I accomplish it. Thankyou in advance. Regards, Nita

I need help migrating from PA-440 to PA-1410

My current PA-440 is running 10.1.3 OS where as the PA-1410 is running 11.1.4.h7

New Expedition Build

I've tried this in both ESXi and Azure, Ubuntu 20.04 LTS build as per the install guide. I can log in but regularly get this "REMOTE EXCEPTION" error, if I click OK it just re-appears later when I click on something. Has anyone faced this before?

Building Expedition

Can anyone help me build expedition, I tried using ubuntu 20.04 with https://conversionupdates.paloaltonetworks.com/expedition1_Installer_latest.tgz however it was unsuccessful...Can anyone provide me stable ova file for ARM supported?

Implementing checkov for shared modules

Hello Everyone, I am trying to implement Checkov in one of the portal repositories to validate policies and other configurations. However, I am facing an issue with downloading shared Terraform modules present in the One of the project. Somehow, Checkov is unable to download these modules and is giving the following warnings: 2025-07-01 10:09:12...

Does the last version of Expedition support Panos 11.1.x code?

I'm needing to perform an address object and service object cleanup to help reduce overall config size. I have NUMEROUS duplicates in the Panorama config and would like to consolidate them quickly via Expedition. Before I do, I need to know if the last version of Expedition before it went EOL supported Panos 11.1.x code. I already ran it thro...

Microsoft Sentinel Incident custom details fetch in XSOAR

Hi everyone,I've configured the Microsoft Sentinel integration instance in XSOAR, and it's successfully fetching incidents along with associated entities. However, I'm unable to retrieve the custom details (also known as additionalData or customDetails in Sentinel) from those incidents.These fields are critical for our triage and enrichment work...