Palo Alto device importer¶
Versio.io can import, historize and process configuration data from Palo Alto Networks network devices.
Configuration¶
You can find the configuration option in Versio.io at Environment settings > OneImporter > Configurations > Palo Alto.
Here you can edit all existing configurations, create new configurations or delete existing configurations.
To add a new configuration, enter a Name for your importer.
Click Add to proceed to the configuration.
To edit an existing configuration, click the arrow on the left of your importer name to expand the configuration options.
The following configuration options are available:
| Field | Description | Advice |
|---|---|---|
| Name | Meaningful name | Add the word "Palo Alto" to identify the importer when viewing the logs |
| Active | Option to activate and deactivate the configuration. Data is only imported if the configuration is activated. | |
| Credential | Select authorization for network device access. | Enter API username and password at Settings > Access Management > Credential Vaults |
| Domains & IPs | Enter all network device domains or IPs. | |
| Entities | Select the entities to be inventoried by Versio.io. | |
| Executing OneImporter | Select a Versio.io OneImporter to import the data based on the importer configuration. | Requires an installed OneImporter: Installation instructions |
| Schedule time (cron format) | Determine the frequency of imports in CRON format | Learn more about CRON format: https://en.wikipedia.org/wiki/Cron |
Table: Palo Alto network device configuration parameters
Create Palo Alto API user¶
Versio.io executes the following requests to your Palo Alto network device to inventory it:
https://${address}/api/?type=keygen&user=${username}&password=${password}
https://${address}/api/?type=op&cmd=<show><system><info></info></system></show>&key=${apiKey}
https://${address}/api/?type=op&cmd=<show><config><running></running></config></show>&key=${apiKey}
For the inventory, it is necessary to create a user (requires the admin role with restricted XML API rights) so that Versio.io can authenticate itself on the network device. You can create the user using the Palo Alto GUI:
