how to integrate paloalto firewall with Cortex XSOAR

[syafeera90]

Hi,

I have setup Cortex XSOAR. However, i'm still confuse  what i can do with this platform.. Someone said, i can integrate my Paloalto Firewall with Cortex XSOAR... Is there anyone here, know how to integrate my Palo alto firewall with Cortex XSOAR?

[BPry]

@syafeera90,

The integration itself is pretty easy since it just uses the API primarily. You just need to go into integrations and servers & services and add a new integration instance. This will ask for the URl, port, API key and everything else it needs for access. Once it's added, there's a lot of different things you can add into your playbooks. 

[syafeera90]

@BPry Hye thank you for assist me, btw, how to get API key from Palo-alto firewall? What i know, we need to enable it at palo alto portal right?

paloalto portal > Assets >site license s tab > add site license > enter authorization code.

If we enable the license, is it effect our production for Palo alto Firewall? how do we get authorization code?

[syafeera90]

@BPry what port do i need to configure at the add instance form? Then, do i need to configure any port at my palo alto firewall?

[RSumalal]

Hello

I have a query with respect to PaloAlto firewall integration with Cortex XSOAR, there is no firewall based commands listing or showing as built in.

Its only listing panorama based commands when I go to the integrated firewall instance. How can I get firewall based commands into Cortex XSOAR platform or make it available?