Fortinet Document Library

Version:


Table of Contents

Palo Alto Networks Panorama

1.0.0
Copy Link

About the connector

The Paloalto Panorama application integrates with the Palo Alto Networks Firewall and supports containment actions such as blocking URLs or IP addresses.

This document provides information about the Paloalto Panorama connector, which facilitates automated interactions with Paloalto Panorama using FortiSOAR™ playbooks. Add the Paloalto Panorama connector as a step in FortiSOAR™ playbooks and perform automated operations, such as blocking or unblocking URLs, IP addresses, or applications that you have specified using the Paloalto Firewall and retrieving a list of connected firewalls from Paloalto Panorama.

Version information

Connector Version: 1.0.0

Authored By: Fortinet

Certified: No

 

Installing the connector

All connectors provided by FortiSOAR™ are delivered using a FortiSOAR™ repository. Therefore, you must set up your FortiSOAR™ repository and use the yum command to install connectors:

yum install cyops-connector-paloalto-panorama

For the detailed procedure to install a connector, click here.

 

Configuring the connector

For the procedure to configure a connector, click here.

 

Actions supported by the connector

The following automated operations can be included in playbooks and you can also use the annotations to access operations from FortiSOAR™ release 4.10.0 onwards:

 

Function Description Annotation and Category
Block IP Blocks the IP address that you have specified using the Paloalto Firewall. block_ip
Containment
Unblock IP Unblocks the IP address that you have specified using the Paloalto Firewall. unblock_ip
Remediation
Block URL Blocks the URL that you have specified. block_url
Containment
Unblock URL Unblocks the URL that you have specified. unblock_url
Remediation
Block Application Blocks the application that you have specified. block_app
Containment
Unblock Application Unblocks the application that you have specified. unblock_app
Remediation
List of Connected Firewalls Retrieves a list of connected firewalls.  

 

Included playbooks

The Sample - Paloalto Panorama - 1.0.0 playbook collection comes bundled with the Paloalto Panorama connector. This playbook contains steps using which you can perform all supported actions. You can see the bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Paloalto Panorama connector.

 

Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection, since the sample playbook collection gets deleted during connector upgrade and delete.

 

About the connector

The Paloalto Panorama application integrates with the Palo Alto Networks Firewall and supports containment actions such as blocking URLs or IP addresses.

This document provides information about the Paloalto Panorama connector, which facilitates automated interactions with Paloalto Panorama using FortiSOAR™ playbooks. Add the Paloalto Panorama connector as a step in FortiSOAR™ playbooks and perform automated operations, such as blocking or unblocking URLs, IP addresses, or applications that you have specified using the Paloalto Firewall and retrieving a list of connected firewalls from Paloalto Panorama.

Version information

Connector Version: 1.0.0

Authored By: Fortinet

Certified: No

 

Installing the connector

All connectors provided by FortiSOAR™ are delivered using a FortiSOAR™ repository. Therefore, you must set up your FortiSOAR™ repository and use the yum command to install connectors:

yum install cyops-connector-paloalto-panorama

For the detailed procedure to install a connector, click here.

 

Configuring the connector

For the procedure to configure a connector, click here.

 

Actions supported by the connector

The following automated operations can be included in playbooks and you can also use the annotations to access operations from FortiSOAR™ release 4.10.0 onwards:

 

Function Description Annotation and Category
Block IP Blocks the IP address that you have specified using the Paloalto Firewall. block_ip
Containment
Unblock IP Unblocks the IP address that you have specified using the Paloalto Firewall. unblock_ip
Remediation
Block URL Blocks the URL that you have specified. block_url
Containment
Unblock URL Unblocks the URL that you have specified. unblock_url
Remediation
Block Application Blocks the application that you have specified. block_app
Containment
Unblock Application Unblocks the application that you have specified. unblock_app
Remediation
List of Connected Firewalls Retrieves a list of connected firewalls.  

 

Included playbooks

The Sample - Paloalto Panorama - 1.0.0 playbook collection comes bundled with the Paloalto Panorama connector. This playbook contains steps using which you can perform all supported actions. You can see the bundled playbooks in the Automation > Playbooks section in FortiSOAR™ after importing the Paloalto Panorama connector.

 

Note: If you are planning to use any of the sample playbooks in your environment, ensure that you clone those playbooks and move them to a different collection, since the sample playbook collection gets deleted during connector upgrade and delete.