Skip to main content

Incident ResponderIncident Responder Documentation

Version: i56

Configure the Palo Alto Networks Firewall Service

Configure Palo Alto Networks® PAN‑OS® as a service to block and unblock IP addresses and URLs using actions.

The Palo Alto Networks Firewall service connects to PAN-OS, which controls an individual firewall. It does not connect to Palo Alto Networks Panorama™, which manages multiple firewalls.

  • Ensure you have PAN-OS version 8.1.15 or earlier.

  • Ensure you have a supported PAN-OS Administrator or Admin role.

  • Generate a PAN-OS API key.

  • Note the IP address of your Palo Alto Networks firewall. The IP address of your firewall was determined when you initially configured the firewall.

  1. In the navigation bar, click the menu The menu icon in the navigation bar; three white lines on a green background., select Settings, then select Core.

  2. Under SERVICE INTEGRATIONS, select Services.

  3. Select a service:

    • To configure a specific service, hover over a service, then click CONFIGURE. Use the search by vendor or filter by action to find a service.

    • To manually provide the relevant information for a service, click Configure a new serviceA blue circle with a white plus sign..

    • To view all actions for a service, hover over a service, then click the information icon An icon of a grey i inside a grey circle..

  4. Enter information about the service:

    • Service Name – Enter a unique name for the service. By default, the service name is Palo Alto Networks Firewall.

    • (Optional) Description – Describe the service.

    • (Optional) Owner – Enter the email address of the person or group responsible for the service. 

    • Firewall host – Enter the IP address of your Palo Alto Networks firewall.

    • API Key – Enter the PAN-OS API key you generated.

  5. To validate the source, select TEST CONNECTIVITY.

  6. Click CREATE SERVICE.