API Authentication and Security
To authenticate your API request to the firewall or Panorama,
provide the API key in any of the following ways:
Use
the custom HTTP header,X-PAN-KEY: <key> to
include the API key in the HTTP header.
For the XML API, include the API key as a query parameter
in the HTTP request URL.
Use
Basic Authentication to
pass the admin credentials as
username:password with
Base64 encoding in an Authorization header field.
Authorization: Basic ****************************
As a best practice:
- Set an API key lifetime to enforce key
rotation; you can also revoke all API keys to protect from accidental
exposure.
- Use a POST request for any call that may contain sensitive information.
To enforce key rotation set an
API key lifetime; you can also revoke all API
keys to protect from accidental exposure.
