CORTEX XDR

[rudhramoorthy]

I want to add palo alto firewalls to cortex xdr do I need to add only panorama or do I need to add 

Indvidual firewalls to get alert 

do i need to use firewall mgmt. ip or panorama mgmt. ip 

we have more than 300 firewalls split into HWAN and LAN MFG 

[neelrohit]

Hi @rudhramoorthy ,

thank you for writing to live community. 

if the above are all panorama managed firewalls, you can configure directly from panorama by choosing each device template to configure log forwarding. The logs are forwarded from firewalls only, however, it is tha panorama which can dictate the configuration for log forwarding. Each HA pair can be considered as 1 firewall. I am assuming you would have both in the device templates so it should be doable. 

Please mark the solution as “Accepted” if it answers you query.

regards.