>
    Strata Copilot
    Set up Palo Alto Networks PAN-OS for Integration
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. Network Management
    5. Integrate Device Security with Palo Alto Networks PAN-OS
    6. Set up Palo Alto Networks PAN-OS for Integration
    Download PDF
    Device Security

    Set up Palo Alto Networks PAN-OS for Integration

    Table of Contents

    Set up Palo Alto Networks PAN-OS for Integration

    Configure API access for PAN-OS firewalls to enable integration with Device Security through Cortex XSOAR.
    Where Can I Use This?What Do I Need?
    • Device Security (Managed by Strata Cloud Manager)
    • (Legacy) IoT Security (Standalone portal)
    One of the following subscriptions:
    • Device Security subscription for an advanced Device Security product (Enterprise Plus, Industrial OT, or Medical)
    • Device Security X subscription
    One of the following Cortex XSOAR setups:
    • A free, cohosted, limited-featured Cortex XSOAR instance
      AND
      A Cortex XSOAR Engine (on-premises integration)
    • A full-featured Cortex XSOAR server
    When integrating Device Security with PAN-OS through Cortex XSOAR, you can choose to integrate directly with each individual firewall or to integrate with multiple firewalls managed by Panorama. In both cases, you need to provide Cortex XSOAR with API access to your firewalls. The integration uses the Panorama XML API.
    1. Follow the instructions to Generate an API Key Certificate for your next-generation firewalls.
    2. Run the following CURL command and copy the key:
      curl -H "Content-Type: application/x-www-form-urlencoded" -X POST https://[PanoramaIP]/api/\?type\=keygen -d 'user=[user]&password=[password]'
    3. Save the key to use when you Set up Device Security and Cortex XSOAR for Palo Alto Networks PAN-OS Integration.

    © 2025 Palo Alto Networks, Inc. All rights reserved.