Palo Alto PAN-OS and Panorama

Release 1.0

About This Document

This guide performs the steps necessary to integrate Palo Alto network configuration data to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages network configuration data from sources like PAN-OS and Panorama to provide visibility into how assets are connected in a network perspective.

Overview

PAN-OS and Panorama allows API access by virtue of a username and password combination. For SSH collections, a username and password combination are needed, along with the appliance IP address.

The Epiphany Intelligence Platform only requires the Device administrator (read-only) role.

There are two options to accomplish this; either method is acceptable:

• Option 1: Create a new user who is designated for use by Epiphany and then submit its credentials.

• Option 2: Use an existing user and submit its credentials.

Version Compatibility

• Epiphany: Epiphany Collector Version 1.0 and later.

• PAN-OS/Panorama: PAN-OS and Panorama 8.0.0 and later.

• PAN-OS/Panorama API: PAN-OS and Panorama XML API 8.1 and later.

Prerequisites

• Access to the PAN-OS or Panorama web UI.

• Ability to create a user, or access to an existing user with the role of device administrator (read-only).

If SSH collection is used: SSH access to network appliances from the Epiphany On-Prem Collector will be required.

What is Needed for Integration

• A username with Device administrator (read-only) role and its password.

• The IP address or FQDN of the PAN-OS or Panorama appliance.

Legal Notice