Connecting Cortex XSOAR to Internal Cloud Hosted Panorama for Prisma Access Integration

[Wassif]

I'm seeking assistance on securely establishing an SSH connection from Cortex XSOAR to Panorama as part of the integration Prisma Access with XSOAR. This integration aims to execute CLI commands on Panorama, which is hosted within Azure (internally). To ensure security and avoid exposing Panorama to the internet, I'm looking for best practices or configurations involving intermediary services or agents within Azure or XSOAR. Any documentation or recommendations on how to securely facilitate this connection would be greatly appreciated.

Cortex XSOAR Prisma Access Azure Panorama 

[MichaelHinderman]

Hello,

It sounds like you will need to leverage an XSOAR engine to allow your XSOAR instance, assuming your instance is hosted, to talk to services within you network. 

In short, an XSOAR Engine is a reverse proxy that maintains an open connection between XSOAR and itself. The engine will initiate all network communication outward, so you will not need to expose any ports. Once the connection has been made, XSOAR is able to use that pipe to execute commands on the engine, and results will be returned back to XSOAR. You can read more about engines here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Engines