>
    Strata Copilot
    Next-Gen Integration Workflow
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. Next-Gen Integration
    5. Next-Gen Integration Workflow
    Download PDF
    Device Security

    Next-Gen Integration Workflow

    Table of Contents

    Next-Gen Integration Workflow

    Set up and manage third-party integrations by creating integration instances, configuring profiles, and monitoring activity.
    Where Can I Use This?What Do I Need?
    • Device Security (Managed by Strata Cloud Manager)
    One of the following subscriptions:
    • Device Security subscription
    • Precision AI bundle subscription
    • Device Security X subscription
    Setting up a third-party integration involves four stages: initializing the Next-Gen Integration platform, configuring use case profiles, creating an integration instance, and monitoring integration activity.
    You must have superuser permissions to create service accounts to set up Next-Gen Integration, regardless of whether you are setting up third-party integrations for the first time or migrating from Cortex XSOAR.
    1. Set up the platform — Before you can create any integration instances, you must initialize Next-Gen Integration, including configuring integration engines. If you are setting up integrations for the first time, see Set Up Next-Gen Integration. If you have existing third-party integrations configured through Cortex XSOAR, you can initialize Next-Gen Integration and manually migrate your integrations, or you can wait for the migration tool to be available.
    2. Optional Configure integration profiles — An integration profile controls the schedule and scope of each use case within an instance. The schedule determines how often each use case runs. The scope limits which sites, locations, networks, or device groups the use case processes. You can create multiple profiles from the same base profile to apply different schedules and scopes to different instances.
      All integrations include a default profile that supports all use cases for that integration. You can't edit or delete the default profile, but you can clone it to create a new profile. If you do not configure custom profiles, then integration instances use the default profile.
    3. Create an integration instance — Connect Device Security to a specific third-party system. For each integration, you need to:
      1. Select the integration
      2. Name the integration instance
      3. Assign an engine
      4. Configure the connection credentials and endpoint details
      5. Select the profile to use
      6. Save and enable the integration instance
    4. Monitor integration activity — After an instance is active, Monitor Third-Party Integrations with the Integration Activity tab. From there you can review the health of your engine fleet, integration instances, and the status and results of each use case run.

    © 2026 Palo Alto Networks, Inc. All rights reserved.