Integrate Device Security with Palo Alto Networks PAN-OS
Focus
Focus
Device Security

Integrate Device Security with Palo Alto Networks PAN-OS

Table of Contents

Integrate Device Security with Palo Alto Networks PAN-OS

Integrate Device Security with PAN-OS to get better visibility into your Palo Alto Networks firewall infrastructure.
Where Can I Use This?What Do I Need?
  • Device Security (Managed by Strata Cloud Manager)
  • (Legacy) IoT Security (Standalone portal)
One of the following subscriptions:
  • Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical)
  • Device Security X subscription
One of the following Cortex XSOAR setups:
  • A free, cohosted, limited-featured Cortex XSOAR instance
    AND
    A Cortex XSOAR Engine (on-premises integration)
  • A full-featured Cortex XSOAR server
Integrate Device Security with PAN-OS to get better visibility into your Palo Alto Networks firewall infrastructure when AIOps isn't enabled on your next-generation firewalls. The PAN-OS integration for Device Security provides essential firewall metadata and interface information to help you better understand your network security posture.
You can integrate with PAN-OS directly through individual firewalls, or through Panorama if you use Panorama for firewall management. When integrating with Panorama, Device Security can learn device information for all firewalls managed by Panorama.
To integrate Device Security with PAN-OS, you need a Cortex XSOAR server that connects to your PAN-OS devices, using the PAN-OS API. You can configure integration instances on Cortex XSOAR to automatically retrieve device information from Panorama or directly from individual firewalls. With more contextual data, Device Security can properly categorize firewall devices as network security equipment with their management addresses clearly identified. You can configure recurring jobs to ensure your firewall information stays current.
Integrating with Palo Alto Networks PAN-OS firewalls or Panorama requires either a full-featured Cortex XSOAR server or the activation of a Device Security free cohosted Cortex XSOAR instance.