>
    Strata Copilot
    Set Up Next-Gen Integration
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. Next-Gen Integration
    5. Set Up Next-Gen Integration
    Download PDF
    Device Security

    Set Up Next-Gen Integration

    Table of Contents

    Set Up Next-Gen Integration

    Initialize the Next-Gen Integration to provision the cloud infrastructure that powers your third-party integrations.
    Where Can I Use This?What Do I Need?
    • Device Security (Managed by Strata Cloud Manager)
    One of the following subscriptions:
    • Device Security subscription
    • Precision AI bundle subscription
    • Device Security X subscription
    If you don't have third-party integrations with Device Security configured, initialize the Next-Gen Integration. Initialization is a one-time operation. After initialization completes, you create an engine to manage your integrations. You then configure profiles and integration instances to connect Device Security to third-party systems.
    If you already have third-party integrations configured through Cortex XSOAR, you can either wait for the migration tool to be available, or you can manually migrate your integration instances to Next-Gen Integration.
    You must have both the Device Security and the Strata Cloud Manager Superuser role to initialize Next-Gen Integration.
    1. In Device Security, select IntegrationsIntegration.
    2. Initialize the Next-Gen Integration.
      Device Security begins provisioning the cloud-based engine. Device Security automatically creates a service account, svc-ds-integration, to facilitate the data integration jobs. You can view and manage the service account in Strata Cloud Manager Identity & Access Management.
      You can navigate away from the page and return to check the status. Provisioning typically completes within a few minutes. After initialization completes successfully, you'll see a dashboard page for integration instances and statuses.
    3. Review the Next-Gen Integration engine requirements and configure an engine.
      The engine needs to be installed in your network, allowing communication between your network and Next-Gen Integration, especially when services are otherwise blocked by a firewall or a proxy. Within the network, you need to allow the engine to access Next-Gen Integration.
      You install the engine on a Linux machine using the shell installer script that Device Security provides when you create a new engine. When you run the shell installer script, Docker or Podman is automatically installed.
      1. Select IntegrationsEngine Fleet
      2. Create Engine.
        This opens the Create Engine dialog.
      3. Enter an Engine Name, a Description, and select Shell Installer.
      4. Create the engine.
        Device Security creates the engine and runs the installer for the engine image. You can navigate away from the page and return to check the status. When the engine image is ready, the Installer column gives you the option to Download Image to download the engine installation script.
    4. Install the engine image on a Linux machine by running the installation script. 
      $ path/to/installation/script/installation-script-name.sh
      Once the engine is ready, it reports its status to Device Security. You can check the engine status on the IntegrationsEngine Fleet table.
    5. Proceed to configuring integrations for your third-party solutions, following the Next-Gen Integration Workflow.

    © 2026 Palo Alto Networks, Inc. All rights reserved.