This guide performs the steps necessary to integrate Palo Alto network configuration data to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages network configuration data from sources like PAN-OS and Panorama to provide visibility into how assets are connected in a network perspective.
Overview
PAN-OS and Panorama allows API access by virtue of a username and password combination. For SSH collections, a username and password combination are needed, along with the appliance IP address.
The Epiphany Intelligence Platform only requires the Device administrator (read-only) role.
There are two options to accomplish this; either method is acceptable:
Option 1: Create a new user who is designated for use by Epiphany and then submit its credentials.
Option 2: Use an existing user and submit its credentials.
Version Compatibility
Epiphany: Epiphany Collector Version 1.0 and later.
PAN-OS/Panorama: PAN-OS and Panorama 8.0.0 and later.
PAN-OS/Panorama API: PAN-OS and Panorama XML API 8.1 and later.
Prerequisites
If SSH collection is used: SSH access to network appliances from the Epiphany On-Prem Collectorwill be required.