Assistance with Cortex XSOAR and Firewall Integration

[J.X570892]

Hi guys,

I have a question regarding the integration of Cortex XSOAR with a firewall. Could anyone guide me on how to set this up? Additionally, if there are any reference materials or documentation that could assist.

I would greatly appreciate it if you could share them.

Thanks in advance for your help!

[JStephan]

Hey there,

which firewall are we talking about?

I would say hop over to the marketplace and check if your firewall is available

https://cortex.marketplace.pan.dev/marketplace/?category=Network+Security&marketplace=Cortex+XSOAR

If you find it

• install the integration on XSOAR
• configure the integration
• and start creating or using a playbook befitting your use case

If you cant find your firewall, well than we depend on the use case. 

For example XSOAR can offer a dynamic list (EDL) which you could use to feed a block/allow list on your firewall

https://cortex.marketplace.pan.dev/marketplace/details/EDL/

[J.X570892]

Could you please provide a walkthrough on integrating Palo Alto firewall with XSOAR, including the configuration of EDR and notification forwarding?

[JStephan]

Well, that could take a bit too long 🙂

But maybe you want to start here:

https://cortex.marketplace.pan.dev/marketplace/details/PANOS/

and check out the webinars
https://live.paloaltonetworks.com/t5/customer-success-webinars/tkb-p/Cortex_XSOAR_Trainings