New Features - Device Security - August 2025

Device Security supports integrating with ServiceNow Service Graph Connector to learn about devices and endpoints from ServiceNow . Device Security can retrieve device details from ServiceNow and use that information to enrich device information in the Device Security assets inventory. Device Security also creates new devices in the assets inventory for devices learned through the Service Graph Connector integration. You can download the Service Graph Connector for PANW IoT from the ServiceNow Store, and also find the installation and configuration guide there.

Device Security is a significant evolution from IoT/OT Security. Device Security delivers unified, AI-powered protection across all connected devices, to include unmanaged and managed IT, IoT, OT, and BYOD devices. Leveraging Precision AI®, Device Security aims to provide proactive and holistic asset protection with comprehensive visibility, built-in adaptive security, and significantly enhanced threat prevention capabilities to effectively reduce risk across your entire network.

The transition to Device Security signifies a fundamental shift in our approach, beyond previous IoT/OT Security offerings. Key new features and enhancements include:

• Expanded Device Coverage provides holistic asset protection for all connected devices, directly addressing the need for broader coverage for unmanaged BYOD and noncompliant managed IT assets, and expanding the asset scope and risk insights.

• Comprehensive Visibility and Context aggregates visibility with greatly enriched risk contexts, now supporting over 2,000 identity and posture attributes for all connected devices.

• Proactive Risk Mitigation provides adaptive device policy rules with Advanced Device-ID, which leverages all available identity and risk attributes for enforcement, compared to six attributes previously.

• Streamlined Compliance & Reporting improves risk and compliance reporting through full dashboard customization and a more scalable Query Builder.

• Simplified Integrations with a free, limited, cloud-based Cortex XSOAR can be activated directly from the integrations page in Strata Cloud Manager . Third-party integrations no longer require a separate add-on license.

Device Security extends API support to include getting a list of all device attribute names, and then passing up to 50 attributes to the Device Inventory v2 API to get those attributes' values for devices in the assets inventory. Use these new API options to specify attributes of interest, and to get the most up-to-date list of all available device attributes, including third-party attributes.

( October 2025 ) The Network Discovery plugin version 2.2.3 introduces an enhancement for SNMP crawling to skip IP phones. This helps improve runtime and performance for an SNMP crawl. Version 2.2.3 also includes a number of addressed issues to improve runtime performance and results. See Known Issues in Network Discovery 2.2 for a full list of addressed issues. The Network Discovery plugin version 3.0.1 includes the same functionality as Network Discovery 2.2.3 for firewalls running PAN-OS 12.1.2 and later.

( August 2025 ) The Network Discovery plugin version 2.2.2 includes a number of addressed issues to improve runtime performance and results output. See Known Issues in Network Discovery 2.2 for a full list of addressed issues.

( July 2025 ) The Network Discovery plugin version 2.2.1 includes a number of addressed issues to improve configuration and runtime performance. See Known Issues in Network Discovery 2.2 for a full list of addressed issues.