- 10 Dec 2023
- 2 Minutes to read
Palo Alto Networks Panorama
- Updated on 10 Dec 2023
- 2 Minutes to read
The Palo Alto Panorama management server provides centralized monitoring and management of multiple next-generation firewalls and appliance clusters.
Types of Assets Fetched
This adapter fetches the following types of assets:
About Palo Alto Networks Panorama
Use cases the adapter solves
Connecting Panorama to Axonius will allow you to quickly identify which assets are accessing the network over VPN. Specifically, Axonius can identify which private IP address is being used on the organization's internal network and identify which public IP address was used to access the VPN.
Data retrieved by Panorama
Network interface data about how the client connected to the VPN.
Because it leverages the PanOS API, the Palo Alto Panorama adapter can be used to connect directly to Palo Alto firewalls if a Panorama endpoint is not available.
- Panorama Domain (required) - The hostname or IP address of the Palo Alto Panorama server or PA Firewall server.
- User Name and Password (optional) - The credentials for a user account that has the Required Permissions to fetch assets.
- API Key (optional) - An API Key associated with a user account that has the Required Permissions to fetch assets.
If User Name and Password are supplied, this field will be ignored.
Verify SSL - Select whether to verify the SSL certificate offered by the value supplied in Panorama Domain. For more details, see SSL Trust & CA Settings.
For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters
Fetch ARP data (required, default: True) - Select whether to fetch ARP data from the Palo Alto Panorama server.
- If enabled, all connections for this adapter will fetch ARP data from Palo Alto Panorama.
- If disabled, all connections for this adapter will not fetch ARP data from Palo Alto Panorama.
Force logout of the user - Select this option to force logout of the account used to query the Palo alto Panorama data.
Fetch Policies - Select this option to fetch firewalls security and NAT policies.
Fetch Network Entities (Addresses, Ethernet Interfaces) - Select this option to fetch Addresses as an asset and to fetch Ethernet interfaces as a new device type.
If you have supplied an API Key - You can obtain an API key by following the instructions here as an alternative to using a username/password as described above (once the API has been enabled as described here).