# Palo Alto PAN-OS and Panorama

## About This Document

This guide performs the steps necessary to integrate Palo Alto network configuration data to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages network configuration data from sources like PAN-OS and Panorama to provide visibility into how assets are connected in a network perspective.

## **Overview**

PAN-OS and Panorama allows API access by virtue of a username and password combination. For SSH collections, a username and password combination are needed, along with the appliance IP address.

The Epiphany Intelligence Platform only requires the Device administrator (read-only) role.

There are two options to accomplish this; either method is acceptable: 

* **Option 1**: Create a new user who is designated for use by Epiphany and then submit its credentials. 
* **Option 2**: Use an existing user and submit its credentials.

## **Version Compatibility**

* **Epiphany:** Epiphany Collector Version 1.0 and later.
* **PAN-OS/Panorama:** PAN-OS and Panorama 8.0.0 and later.
* **PAN-OS/Panorama API:** PAN-OS and Panorama XML API 8.1 and later.

## **Prerequisites**

* [ ] Access to the PAN-OS or Panorama web UI.
* [ ] Ability to create a user, or access to an existing user with the role of device administrator (read-only). 

{% hint style="warning" %}
**If SSH collection is used**: SSH access to network appliances from the Epiphany On-Prem Collector will be required.
{% endhint %}

## **What is Needed for Integration**

* [ ] A username with Device administrator (read-only) role and its password.
* [ ] The IP address or FQDN of the PAN-OS or Panorama appliance.

[Legal Notice](/technical-documentation/legal-notice.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.reveald.com/technical-documentation/data-sources-early-access/palo-alto-pan-os-and-panorama.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.