About the connector
The Paloalto Panorama application integrates with the Palo Alto Networks Firewall and supports containment actions such as blocking URLs or IP addresses.
This document provides information about the Paloalto Panorama connector, which facilitates automated interactions with Paloalto Panorama using FortiSOAR™ playbooks. Add the Paloalto Panorama connector as a step in FortiSOAR™ playbooks and perform automated operations, such as blocking or unblocking URLs, IP addresses, or applications that you have specified using the Paloalto Firewall and retrieving a list of connected firewalls from Paloalto Panorama.
Version information
Connector Version: 1.0.0
Authored By: Fortinet
Certified: No
Installing the connector
All connectors provided by FortiSOAR™ are delivered using a FortiSOAR™ repository. Therefore, you must set up your FortiSOAR™ repository and use the yum command to install connectors:
yum install cyops-connector-paloalto-panorama
For the detailed procedure to install a connector, click here.
Configuring the connector
For the procedure to configure a connector, click here.
Actions supported by the connector
The following automated operations can be included in playbooks and you can also use the annotations to access operations from FortiSOAR™ release 4.10.0 onwards:
| Function |
Description |
Annotation and Category |
| Block IP |
Blocks the IP address that you have specified using the Paloalto Firewall. |
block_ip
Containment |
| Unblock IP |
Unblocks the IP address that you have specified using the Paloalto Firewall. |
unblock_ip
Remediation |
| Block URL |
Blocks the URL that you have specified. |
block_url
Containment |
| Unblock URL |
Unblocks the URL that you have specified. |
unblock_url
Remediation |
| Block Application |
Blocks the application that you have specified. |
block_app
Containment |
| Unblock Application |
Unblocks the application that you have specified. |
unblock_app
Remediation |
| List of Connected Firewalls |
Retrieves a list of connected firewalls. |
|
Included playbooks
The Sample - Paloalto Panorama - 1.0.0 playbook collection comes bundled with the Paloalto Panorama connector. This playbook contains steps using which you can perform all supported actions. You can see the bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Paloalto Panorama connector.
Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection, since the sample playbook collection gets deleted during connector upgrade and delete.
