Contents x
    Palo Alto Network Cortex Xpanse - Tag Assets
    • 13 Jan 2025
    • 2 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    Palo Alto Network Cortex Xpanse - Tag Assets

    • Updated on 13 Jan 2025
    • 2 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    Palo Alto Network Cortex Xpanse - Tag Assets adds tags to Internet assets for:

    • Assets returned by the selected query or assets selected on the relevant asset page.

    See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

    Note:

    Required Fields

    These fields must be configured to run the Enforcement Set.

    • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
    • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

    • Use stored credentials from the Palo Alto Networks Cortex Xpanse adapter - Select this option to use the first connected Palo Alto Networks Cortex Xpanse adapter credentials.

      NOTE
      • To use this option, you must successfully configure a Palo Alto Networks Cortex Xpanse adapter connection.
      • The user name and the password used for the adapter connection must have the required permissions to add tags.

    • Tags - The name of the new tag to add. Type the name of a tag and press Enter. Multiple tags can be added. To add a tag as a key:value pair, separate the key and value with a : (colon).

    • Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

    Additional Fields

    These fields are optional.

    Connection Parameters

    If Use stored credentials from the Palo Alto Networks Cortex Xpanse adapter is disabled, these fields are required.

    • Host Name or IP Address (default: https://expander.expanse.co) - The host name or IP address of a Palo Alto Networks Xpanse Cortex server.
    • Client ID - Specify the user account that has permissions to add tags.
      To obtain a Client ID, see Acquiring a Client ID and Client Secret.
    • Client Secret - Specify the client secret that has permissions to add tags. To obtain a Client Secret, see Acquiring a Client ID and Client Secret.
    • API key - An API Key associated with a user account that has permissions to add tags. This is mandatory for API v2. When Client ID and **Client Secret **are provided, API Key is not required.
    • API Key ID - If you select API v2 you need to add both an API Key and the API ID. In addition, make sure you enter the correct domain for your API version.
    • API Version - Select the API Version v1, or v2.
    • Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
    • HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
    • HTTPS Proxy User Name (optional) - The user name to use when connecting to the server using the  HTTPS Proxy.
    • HTTPS Proxy Password (optional) - The password to use when connecting to the server using the  HTTPS Proxy.

    Required Ports

    Axonius must be able to communicate with the value supplied in Hostname or IP Address via the following ports:

    • TCP port 80
    • TCP port 443

    APIs

    Axonius uses the Palo Alto Networks Cortex Xpanse API.

    Required Permissions

    The credentials of the user account used to add tags must have permission to write tags to assets.

    For more details about other Enforcement Actions available, see Action Library.

    Was this article helpful?
    What's Next