Getting started
How collection works
Follow the device read, local processing, delivery and analysis.
The collection journey
Read locally
The app reads the management interface from your workstation.
Prepare the configuration
Supported secret fields are removed locally before upload. See data handling.
Deliver to your workspace
The workspace token authorizes upload to ConfigProof.
Start analysis
Prepared deliveries normally start analysis automatically; complete any destination or context selection requested by the result.
Choose a device or a manager
| Target | Why it matters |
|---|---|
| PAN-OS firewall | Read this firewall, including device identity and the available configuration state. |
| Panorama / SCM / other manager | Read management hierarchy and available managed-device data. A manager snapshot does not automatically prove every device is running that policy. |
| Identity platform | Read policies, objects and platform configuration through the platform APIs. |
| Switch or gateway OS | Read configuration and permitted operational output via the selected management method. |
Two independent credentials
Vendor credentials authenticate to the device or cloud vendor. The cpc_ token authorizes delivery to ConfigProof. Keep both limited to the collection window.