Clariti Docs
Credentials5 minutes· easy

Palo Alto Networks PAN-OS

Network Security

The Palo Alto adapter connects to PAN-OS firewalls to pull connected device inventory, network interface configurations, and security zone mappings into Clariti for network security posture visibility.

What Clariti Collects

What You'll Need

  • Administrator access to the PAN-OS web interface
  • PAN-OS 8.1 or later with XML API enabled
  • ~5 minutes to complete setup
  • Your Clariti account with adapter management permissions

Get Your Credentials

Log in to the PAN-OS web interface. Navigate to Device > API keys (under the Management section). Click Generate API Key, which creates a key tied to your current admin session.

Alternatively, you can generate a key using the API endpoint directly: https://<firewall>/api/?type=keygen&user=<username>&password=<password>. The XML response contains the API key in the <key> element.

For least-privilege access, create a dedicated admin role profile with read-only access to device, network, and system information, and generate the API key from that account.

Enter Credentials in Clariti

Value from vendor consolePaste into Clariti field
API KeyAPI Key
Firewall hostname or IPHost

Verify Connection

Click Test Connection in Clariti. A successful connection returns a green checkmark. The first data sync typically completes within a few minutes.

Troubleshooting

  • 401 Unauthorized — The API key expires when the associated admin password changes. Generate a new key after any password rotation.
  • 403 Forbidden — Ensure the admin account has at least read-only access to Device and Network configuration nodes.
  • Timeout — Verify the firewall management interface is network-reachable from Clariti. Clariti retries automatically on transient failures.