Skip to main content

Palo Alto Networks AIOps

This Integration is part of the Palo Alto Networks AIOps Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.9.0 and later.

Palo Alto Networks Best Practice Assessment (BPA) analyzes NGFW and Panorama configurations and compares them to the best practices. This integration was integrated and tested with version from March 2024 of PaloAltoNetworksAIOps.

Configure Palo Alto Networks AIOps on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for Palo Alto Networks AIOps.

  3. Click Add instance to create and configure a new integration instance.

    Pan-OS/Panorama Server URLTrue
    Pan-OS/Panorama API KeyTrue
    TSG IDTrue
    Client IDTrue
    Client SecretTrue
    Trust any certificate (not secure)False
  4. Click Test to validate the URLs, token, and connection.


You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.


Generates a bpa report. Steps -

  • Get information about Pan-OS/Panorama device.
  • Get configuration file of Pan-OS/Panorama. If the user provided an entry_id to a config file this step is skipped.
  • Use the information retrieved above to generate a BPA report.
  • During this process the API also generates a report_id for internal use.

Base Command#



Argument NameDescriptionRequired
entry_id- Optional: Use this argument if you prefer to upload a configuration file instead of generating the report from Panorama/PAN-OS.
- Entry_id from Cortex XSOAR War Room after uploading a file - should be a config file in xml format.
- If you used this argument and the process failed or reached a timeout, make sure the config file is in xml format.
requester_emailRequester email.Required
requester_nameRequester name.Required
interval_in_secondsInterval for polling mechanism. Default is 30.Optional
timeoutTimeout for downloading the file. Default is 600.Optional
export_as_fileWhether to export the generated report as a file. Possible values are: true, false. Default is True.Optional
show_in_contextWhether to show the report data inside the context. Possible values are: true, false. Default is False.Optional

Context Output#

By default, there is no context output for this command. When using show_in_context = True flag the generated report will be inserted to the context data.

Command example#

!aiops-bpa-report-generate requester_name=test

Human Readable Output#

- Initiated#

The report with id 7fec3669-c7bc-4113-b8b9-cae6a2aeb066 was sent successfully. Download in progress...

- If generation was successful#

Generated a file with the relevant data and insert into context data if requested.

- If generation was unsuccessful#

The report with id 7fec3669-c7bc-4113-b8b9-cae6a2aeb066 could not be generated- finished with an error.

- If timed out#

Scheduled entry timed out.

This indicates that the configuration file is not in the correct format or that the timeout period is insufficient for generating the report.#