Before You Begin

• IP address or hostname of the Palo Alto Panorama
• Minimum required credentials on Palo Alto Panorama: Choose between user credentials or shared credentials.
  • User credentials: The username and password you enter.
  • Shared credentials: Optionally, you can use shared credentials from your credential provider (CyberArk is the only credential provider currently supported by Next-Gen Trust Security). To use this option, first set up the connection to CyberArk.
• A Palo Alto Panorama user with the minimum required permissions to access the XML API.The user must be assigned to an Admin Role Profile with:
  • Role type: Panorama
  • XML API privileges:
    • Configuration
    • Operational Requests
    • Commit
    • Import
    • Export

1. Enter the Server Hostname.
2. From the Credential Type drop-down, select either Enter Credentials or Select Credentials. Only users with the enabled "CyberArk shared credential" capability will see this option.
   Important: Your view of credentials may be limited based on your TSG assignment. Users with the Superuser role in the parent TSG can select any credential across the TSG hierarchy, while users with the Superuser role in a child TSG can only select credentials within their assigned TSG.
   Note:
   • Enter Credentials - Is used to enter your admin credentials manually.
   • Select Credentials - Is used to select your shared credentials from CyberArk.
   • If you choose Enter Credentials, enter your Palo Alto Panorama admin credentials in the Username and Password fields.
   • If you choose Select Credentials, from the Credential drop-down, select your shared credentials.
3. Click Test Access, then click Continue. Note that Continue is only enabled if the Test Access is successful.
   Warning: Remember to store your username and password securely when creating a new machine. For security reasons, you will not be able to modify the fields under the "Access" tab without these credentials. This ensures that only authorized individuals can modify these fields.