Panorama integration

[xdrxdrxdr]

Hello,

Have anybody integrate with Panorma? There is an option to do so under the NGFW integration:

How exactly does it work? 

I have integrated XDR with NGFW and everything works fine, logs are collected, but I am wondering what is the use case to integrate with Panorama. 

[aspatil]

Hello @xdrxdrxdr ,

Thanks for reaching out on LiveCommunity!

The purpose to integration of Panorama is to stream the logs of all Firewall Managed by it.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Ingest-Data...

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

[xdrxdrxdr]

So if I configure Panorama device to send logs to XDR how exactly will it work? 

The logs are send from Panorama or from each FW managed by Panorama individually? 

What logs will it be? 

[aspatil]

Hello @xdrxdrxdr ,

The required information has been provided in below article. Request you to go through it:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Ingest-Data...

Let me know if you have any query.

[xdrxdrxdr]

To make sure I understand clearly, can you confirm that logs will be send individually from each firewall? 🙂