Install and Configure

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • Install and configure Palo Alto Networks XSIAM integration for Security Operations application from the ServiceNow Store on your ServiceNow AI Platform® instance.

    Avant de commencer

    Role required: sn_si.admin, sn_si.ingestion_profile_admin

    Remarque :
    Users with the sn_si.admin role can perform all operations available to a profile admin because this role inherits the required permissions by default.

    Procédure

    1. Download Security Incident Response Integration with Palo Alto Networks XSIAM integration from the ServiceNow® Store and install it.
    2. Navigate to All > Security Operations > Integrations > Integration Configurations.
    3. Search for Security Incident Response Integration with Palo Alto Networks XSIAM tile, and select Configure.
    4. On the form, fill in the fields.
      Tableau 1. Security Incident Response Integration with Palo Alto Networks XSIAM form
      Field Description
      Name

      Name of the Cortex XSIAM integration.
      Authorization Key

      Secret API key to authenticate XSIAM API requests.

      The Authorization Key should have Instance Administrator role.
      Key ID

      API key ID associated with the authorization key.
      API URL URL of the XSIAM tenant.
    5. Select Submit.
      The configured integration tile displays.

    Que faire ensuite

    Create an incident profile