How to integrate Servicenow with Palo Alto's Panorama

Himmat Singh Bh
Kilo Explorer

Hi All,

Is there a way to integrate Servicenow with Palo Alto's panorama?

What we are trying to do is that from servicenow we want to sent some IPs or URLs to Panorama API & it should create security rules so that these IPs or URLs can be blocked on Firewall.

Please share your inputs on this.

Thanks & Regards,

Himmat

 

4 REPLIES 4

Priyanka Vasant
Tera Guru

Hi Himmat,

Find the below link that might help you.

https://docs.servicenow.com/bundle/istanbul-security-management/page/product/palo-alto-integration/concept/palo-alto-networks-integration.html

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-servicenow

https://www.paloaltonetworks.com/resources/datasheets/automation-service-for-panorama-and-servicenow

Regards,

Priyanka

Ashutosh Munot1
Kilo Patron
Kilo Patron

HI,

You can use OOB connector which we have with Palo alto. We do need some credentials and rights to this palo alto tools which is well explained below:

https://www.paloaltonetworks.com/resources/datasheets/automation-service-for-panorama-and-servicenow

https://docs.servicenow.com/bundle/london-security-management/page/product/secops-integration-palo-alto-firewall/reference/palo-alto-firewall-landing-page.html


Thakns,
Ashutosh

Hi Ashutosh,

What is the name of the OOB connector for Palo alto?

Thanks,

Shaziya.

 

Alex Cox
ServiceNow Employee
ServiceNow Employee

Hi there,

 

Please note that there are a couple different versions of the integration out there and that using the most recent one will provide the easiest implementation experience and has some extra tracking features.

I'd recommend this one "Palo Alto Networks NGFW for Security Operations":

https://store.servicenow.com/sn_appstore_store.do#!/store/application/031a46fb87401300bbc71c7df7cb0b...

This is the newer one, the older one works differently and is titled "Palo Alto Networks Firewall for Security Operations".