Unified Inventory

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unified Inventory

L0 Member

Hello,

I have come across references to 'Unified Inventory' in the documentation for XSIAM, Xpanse, and Prisma Cloud. Could anyone please clarify if this is a single offering from Palo Alto Networks or specifically from Cortex? Alternatively, do these products each refer to their own inventory feature as being 'unified'?

Ex: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Unified-Ass...

 

It is unclear to me whether all Cortex products share and enrich a single IT asset inventory. I have been unable to locate any specific documentation on this feature.

 

I would greatly appreciate any demo links or in-depth documentation on Cortex Inventory that you can share.

 

Thank you for your assistance!

1 accepted solution

Accepted Solutions

L4 Transporter

Hi Sh4unz0r,

 

Naming of the various products inventory UIs do cause confusion.  The Unified Asset Inventory is a new feature available for XSIAM customers which presents a revamped view of all your assets with a breakdown on where we are getting the data and aggregation for assets that have data from multiple sources.  It also gives you the capability to ingest asset and vulnerability data from 3rd party solutions (currently Tenable.io and Prisma Cloud are supported).

 

The Unified Inventory in Cortex Xpanse is just a view of assets discovered by Xpanse.

 

The Unified Asset Inventory in Prisma Cloud is just a view of hosts, containers, and container images known to Prisma Cloud.

View solution in original post

3 REPLIES 3

L4 Transporter

Hi Sh4unz0r,

 

Naming of the various products inventory UIs do cause confusion.  The Unified Asset Inventory is a new feature available for XSIAM customers which presents a revamped view of all your assets with a breakdown on where we are getting the data and aggregation for assets that have data from multiple sources.  It also gives you the capability to ingest asset and vulnerability data from 3rd party solutions (currently Tenable.io and Prisma Cloud are supported).

 

The Unified Inventory in Cortex Xpanse is just a view of assets discovered by Xpanse.

 

The Unified Asset Inventory in Prisma Cloud is just a view of hosts, containers, and container images known to Prisma Cloud.

Thanks @afurze, I have a couple more questions around XSIAM Unified Asset Inventory if you will entertain me.
1. Do you know if it has an API that can accept assets from legacy or other sources 
2. I think I had seen info about ServiceNow integration somewhere?
3. Does the unified asset inventory allow for custom fields/data enrichment?
4. Lastly any demos or documentation on this new feature would be super helpful!

Sh4unz0r,

 

There is no API available for inserting asset information currently.  As a part of the UAI beta, two integrations from the marketplace have the ability to ingest asset and vulnerability data (Prisma Cloud, and Tenable.io), no other sources are currently supported.  Other sources have been and continue to be able to ingest asset information including NGFW, Cloud Inventory, and ServiceNow CMDB.

 

No customization is available and, as this is still in beta, no documentation is currently available, you can discuss with your Customer Success team for additional information.

  • 1 accepted solution
  • 401 Views
  • 3 replies
  • 0 Likes
  • 25 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!