Device Security
PAN-OS Attribute Reference
Table of Contents
Expand All
|
Collapse All
Device Security Docs
PAN-OS Attribute Reference
This reference lists the attributes that Device Security collects from PAN-OS,
their names as stored in Device Security, and the Device Security device and
interface fields they map to.
When Device Security integrates with PAN-OS, it gains better visibility
into your Palo Alto Networks firewall infrastructure. The attributes in this reference
cover firewall device records and network interface data learned from
PAN-OS.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.
Device Attributes
Device Security collects device attributes from the PAN-OS
show system info command. The following table lists each
PAN-OS attribute, its name as stored in Device Security, and the
Device Security device field it maps to (if applicable).
|
PAN-OS Attribute
|
Device Security Attribute Name
|
Device Security Common Attribute*
|
Description
|
|---|---|---|---|
|
advanced-routing
|
panos.advanced_routing
|
—
|
Indicates whether advanced routing is enabled on the
PAN OS device
|
|
app-version
|
panos.app_version
|
—
|
Application signature database version installed on the
PAN OS device
|
|
av-version
|
panos.av_version
|
—
|
Antivirus signature database version installed on the
PAN OS device
|
|
cloud-mode
|
panos.cloud_mode
|
—
|
Cloud mode configuration of the PAN OS device
|
|
default-gateway
|
panos.default_gateway
|
—
|
Default gateway configured on the PAN OS device
|
|
device-certificate-status
|
panos.device_certificate_status
|
—
|
Status of the device certificate on the PAN OS device
|
|
devicename
|
panos.devicename
|
Device Name
|
Configured device name of the PAN OS device
|
|
family
|
panos.family
|
—
|
Product family of the PAN OS device
|
|
hostname
|
panos.hostname
|
Hostname
|
Hostname configured on the PAN OS device
|
|
ip-address
|
panos.ip_address
|
ipv4_address
|
Management IP address of the PAN OS device
|
|
mac-address
|
panos.mac_address
|
MAC; id
|
MAC address of the PAN OS device. Used as the primary
device identifier.
|
|
model
|
panos.model
|
Model
|
Hardware model of the PAN OS device
|
|
operational-mode
|
panos.operational_mode
|
—
|
Operational mode of the PAN OS device, such as normal
or maintenance
|
|
platform-family
|
panos.platform_family
|
—
|
Platform family classification of the PAN OS device
|
|
public-ip-address
|
panos.public_ip_address
|
—
|
Public IP address of the PAN OS device
|
|
serial
|
panos.serial
|
Serial Number
|
Serial number of the PAN OS device
|
|
sw-version
|
panos.sw_version
|
OS Version
|
PAN OS software version running on the device
|
|
threat-version
|
panos.threat_version
|
—
|
Threat signature database version installed on the
PAN OS device
|
|
vm-cap-tier
|
panos.vm_cap_tier
|
—
|
VM capacity tier of the PAN OS virtual device
|
|
vm-cores
|
panos.vm_cores
|
—
|
Number of CPU cores allocated to the PAN OS virtual
device
|
|
vm-cpuid
|
panos.vm_cpuid
|
—
|
CPU identifier of the host running the PAN OS virtual
device
|
|
vm-license
|
panos.vm_license
|
—
|
License type assigned to the PAN OS virtual device
|
|
vm-mac-base
|
panos.vm_mac_base
|
—
|
Base MAC address assigned to the PAN OS virtual device
|
|
vm-mode
|
panos.vm_mode
|
—
|
Virtualization mode of the PAN OS virtual device
|
Interface Attributes
Device Security collects interface attributes from the PAN OS
show interface all command. The following table lists each
PAN OS attribute, its name as stored in Device Security, and the
Device Security interface field it maps to (if applicable).
|
PAN OS Attribute
|
Device Security Attribute Name
|
Device Security Common Attribute*
|
Description
|
|---|---|---|---|
|
interface_list
|
panos.interface_list
|
third_party_learned_network_interfaces
|
List of network interfaces on the PAN OS device
|
|
ip_address
|
panos.ip_address
|
ipv4_address
|
IP address of the network interface on the PAN OS device
|
|
mac_address
|
panos.mac_address
|
MAC; id
|
MAC address of the network interface on the PAN OS device.
Used as the primary interface identifier.
|
* Only some attributes map to a Device Security Common Attribute.