Palo Alto Networks

Collect a PAN-OS firewall

Read a firewall locally and deliver its configuration with the current collector.

On this page

Prepare

Prepare PAN-OS credentials, a workspace token and reachable management HTTPS address.

Choose the source
Select Firewall or Panorama.
Enter the firewall address
Use the management hostname or IP; start with one firewall.
Select API (HTTPS)
Enter the dedicated account or XML API key.
Add the workspace token
Paste the active cpc_ token.
Continue and review
Check the workspace and planned read, then start.

PAN-OS SSH reads identity over SSH but exports configuration through the HTTPS XML API. Both paths must be reachable.

Check read and delivery outcomes, then open the analysis. For inherited context, see Panorama.