Palo Alto Networks Cortex XDR

introduction this guide explains how to authenticate the palo alto networks cortex xdr connector in swimlane using cortex api token authentication you will generate cortex xdr api credentials, collect the required identifiers, and configure the connector inside swimlane turbine prerequisites cortex xdr access requirements you must have administrative access to the palo alto networks cortex xdr tenant to generate api keys view tenant base url access cortex xdr api settings required credentials during setup, you will collect cortex xdr base url api token cortex xdr api key id authentication overview cortex xdr uses token based authentication with a custom http header authentication requires api token api key id (x xdr auth id header) cortex xdr setup take the following steps to generate the cortex xdr api credentials log in to the palo alto networks cortex xdr console navigate to settings > configurations > integrations > api keys click generate api key enter a name for the api key copy and securely store the api key id and api token the api token is shown only once copy and save it for further usage connector configuration in swimlane log in to turbine from the left hand navigation pane, click orchestration and click assets asset homepage opens click the plus icon to open the configure your connector asset window select palo alto networks cortex xdr from the asset type list fill in the asset settings and asset input as shown configuration – cortex xdr authentication authenticates using cortex xdr api token and api key id field description required url cortex xdr api base url required token api token required x xdr auth id api key id required verify ssl verify ssl certificate optional http proxy proxy configuration optional troubleshooting 401 unauthorized invalid or expired api token incorrect api key id 403 forbidden insufficient api permissions connection errors incorrect base url ssl or proxy issues you have successfully authenticated the palo alto networks cortex xdr connector in swimlane