Palo Alto Networks Cortex Xpanse
Introduction
This guide explains how to authenticate the Palo Alto Networks Cortex Xpanse connector in Swimlane using Cortex Custom Authentication.
You will generate Cortex Xpanse API credentials, collect the required identifiers, and configure the connector inside Swimlane Turbine.
Prerequisites
Cortex Xpanse Access Requirements
- Access Settings and Integrations in Palo Alto Networks Cortex Xpanse
- Create and manage API keys
- Assign roles with Public API access
- View and manage assets, alerts, and incidents
Required Credentials
- FQDN
- API Key
- API Key ID
Authentication Method Overview
The Palo Alto Networks Cortex Xpanse connector uses Cortex Custom Authentication. Authentication is performed using an API Key and API Key ID associated with your Cortex Xpanse tenant.
Cortex Xpanse Setup
Generate an API Key
Take the following steps to generate an API key in Palo Alto Networks Cortex Xpanse:
- Log in to the Cortex Xpanse console.
- Navigate to Settings & Info > Settings > Integrations > API Keys.
- Click + New Key.
- Select the API key type: Standard or Advanced.
- Optionally enable an expiration date.
- Assign a role with View/Edit permissions for the Public API.
- Click Generate.
- Copy the API Key and API Key ID.
Connector Configuration in Swimlane
Take the following steps to configure the connector in Swimlane:
- Log in to Turbine.
- From the left-hand navigation pane, click ORCHESTRATION and click Assets. Asset homepage opens.
- Click the plus icon to open the Configure your Connector Asset window.
- Select Palo Alto Cortex Xpanse from the Asset type list.
- Fill in the Asset Settings and Asset Input as shown:
Configuration β Cortex Xpanse Authentication
Field | Description | Required |
|---|---|---|
fqdn | Cortex Xpanse tenant FQDN | Yes |
api_key | Cortex Xpanse API Key | Yes |
api_key_id | Cortex Xpanse API Key ID | Yes |
verify_ssl | Verify SSL certificate | Optional |
http_proxy | Proxy configuration | Optional |
- Click Create.
Troubleshooting
401 Unauthorized
- Invalid or expired API Key
- Incorrect API Key ID
- API Key lacks Public API permissions
Fix:
- Verify API Key and API Key ID
- Regenerate the API Key if expired
- Ensure role has Public API access
You have successfully authenticated the Palo Alto Networks Cortex Xpanse connector in Swimlane.