Activate and configure the Palo Alto Networks Firewall Integration

The Integration Configuration feature allows you to quickly activate and set up third-party security integrations, including Security Operations Palo Alto Networks - Firewall.

Before you begin

Role required: sn_sec_pan.admin
Note: This procedure can be used to activate the plugin and configure the integration. You can also activate the plugin using the traditional method.

Procedure

  1. Before activating and configuring the integration, access the Palo Alto Networks Firewall dashboard. Take note of the names of the IP Dynamic List, URL Dynamic List, or Domain Dynamic List you are using for firewall blocking.
  2. Navigate to Security Operations > Integration Configuration.
    The available security integrations appear as a series of cards.
    Palo Alto Networks Firewall integration card
  3. In the Palo Alto Networks Firewall card, click Install Plugin.
  4. In the Install Palo Alto Networks Firewall integration dialog box, review the plugin details and click Activate.
  5. When the activation is complete, click Close & Reload Form.
    The Security Integration screen reloads and the Configure button for the integration is available.
  6. Click Configure.
    Palo Alto Networks Firewall configuration
  7. Click Configure firewalls.
  8. In the Firewall Configurations screen, click New.
  9. Fill in the fields on the form, as appropriate.
    Field Description
    Firewalls Click the lock icon and select the firewall to be configured.
    Firewall Version Select the Palo Alto Networks Firewall version. PAN-OS-7.1 is the recommended version. Selecting earlier versions may return inconsistent results.
    Username Enter the username to use when connecting to the firewall via REST endpoints.
    Password Enter the password for the connecting user.
    IP Dynamic List Enter the name of the External Dynamic List or Dynamic Block List you use for IP addresses.
    URL Dynamic List Enter the name of the External Dynamic List or Dynamic Block List you use for URLs.
    Domain Dynamic List Enter the name of the External Dynamic List or Dynamic Block List you use for domains.
  10. Click Submit.