This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Integration Discussions
This forum was created for Palo Alto Networks partners and customers to collaborate on topics related to integrating Palo Alto Networks products.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Integration Discussions
This forum was created for Palo Alto Networks partners and customers to collaborate on topics related to integrating Palo Alto Networks products.
About Integration Discussions
This forum was established for Palo Alto Networks partners and customers to collaborate on topics related to integration on the Palo Alto Networks products.

To start a new topic, simply click "New Message" below.

Discussions

Start a conversation

Panorama OS 11.2 API: Support for Commit All on a Specific User?

Hey all, I am running a Panorama PAN-OS version 11.2.0 instance that managed two Firewall devices, running PAN-OS 11.1.0 and 11.2.7-hc13 I have a question about committing changes to a given template stack / device group for a specific admin account. Before I commit to the template stacks / device groups / templates, I first make an API call to ...

mattirby_0-1785769206742.png
mattirby_2-1785774099572.png
mattirby_1-1785773990089.png

Automating CSV IOC Integration into Cortex XDR

Hi,Currently, we are performing IOC integration manually by importing a CSV file directly into the Cortex XDR console. Is there a capability or best practice to automate this CSV IOC integration? We are looking for ways to automatically fetch and ingest these indicators.Any guidance on using would be greatly appreciated.Thanks in advance!

Create custom widget to display data from JamfPro

Hi Everyone,GreetingsI'm wondering if it's possible to fetch data from JamfPro MDM solution for example user_name, ip address and mac details and add it as a custom widget to the cortex dashboard. If this is possible kindly guide me on how to achieve this.#cortexXDR

H.Patri by • L1 Bithead
  • 1037 Views
  • 0 replies
  • 0 Likes

Implementing checkov for shared modules

Hello Everyone, I am trying to implement Checkov in one of the portal repositories to validate policies and other configurations. However, I am facing an issue with downloading shared Terraform modules present in the One of the project. Somehow, Checkov is unable to download these modules and is giving the following warnings: 2025-07-01 10:09:12...

Microsoft Sentinel Incident custom details fetch in XSOAR

Hi everyone,I've configured the Microsoft Sentinel integration instance in XSOAR, and it's successfully fetching incidents along with associated entities. However, I'm unable to retrieve the custom details (also known as additionalData or customDetails in Sentinel) from those incidents.These fields are critical for our triage and enrichment work...

Automating security rules clean up

Hello everyone, We are wondering if anyone have experience in listing out all security rules in Palo Alto Firewall and get the 'last used' field from the rules using any API.We are looking into reviewing all our rules and perform clean up to unused rules. Appreciate if anyone can share some experience in handling such task. We tried to use the A...

PSLNOC by • L0 Member
  • 1965 Views
  • 1 replies
  • 0 Likes

Modifying Checkpoint FW Access Rule from Cortex XSOAR

Spoiler (Highlight to read)We have the Checkpoint integration v2 on Cortex XSOAR and I tested 'checkpoint-access-rule-update' but we are not able to modify the intended access rule. The access rule is not a main rule but a sub-rule. for example, the rule number that we want to enable/disable is 3.6. It look like the command 'checkpoint-access-ru...

Powershell to run CLI Command

Hi All!I am putting together a PowerShell script to see what IPs are listed in the DoS Block Table. The command (debug dataplane show dos block-table) keeps timing out with the error"Error executing command 'show config running'. Error: Exception calling "EndExecute" with "1" argument(s): "Command 'show config running' has timed out." Below is t...

Service Principal issues on Panorama Plugin for Azure

While setting up the Service Principal on Panorama Plugin for Azure, even though the IAM role of reader seems to be properly defined in Azure we get this error message during the validation phase:ERROR: Validation of #######-####-####-############ failed with msg Failed to validate credentials with error - Failed to validated Azure Monitoring pe...

cezarb by • L2 Linker
  • 10769 Views
  • 5 replies
  • 1 Likes

Aruba ClearPass integration dynamic group issue

Aruba ClearPass version 6.12 integration with palo alto using API, ClearPass match roles and use the enforcement policy to send roles to palo Alto . Palo Alto has dynamic group matched with the same role name received from Aruba ClearPass. the issue that after random time the IP removed from dynamic group the reenter again and this action repeated.

QoS Monitoring for PRTG network monitor

Open this post to follow up QoS Monitoring for PRTG network monitor Anyone still using?Purpose for this discussion is to explore any possibilities to use LibreNMS/PRTG to monitor & stored the QoS statistics belowModel : PA3410 PAN-OS : 11.0.2-h3

chongrichter_0-1731923925396.png

Checkpoint XDR syslog integration

Dear all,we have checkpoint infinity xd solution and we need to integrate it with palo alto ngfw (820 model)checkpoint side give us the guidline and also we made online meeting to check configurations. there are:1. valid checkpoint certificates2. public ip of syslog server3. we create the policy to permit all traffic to that public ip4. we tag t...

ZScaler Integration Error

Hello,I have installed the ZScaler Internet Access integration version: 1.3.16Whenever I try to update it to the version 1.3.24, the command !zscaler-activate-changes returns the error: Failed to execute zscaler-activate-changes command. Error: 'dict' object has no attribute 'json'I believe that it might be an overlook in the integration. Who ca...

MViafora by • L0 Member
  • 2001 Views
  • 0 replies
  • 0 Likes
  • 79 Posts
  • 27 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks