Integrations

Overview

The PaloAltoIntegration allows Cywift to securely connect with Palo Alto Networks firewallsto collect security policies, firewall configurations, NAT rules, andcompliance-related data.

This integrationhelps automate firewall visibility, security posture assessment, and compliancemonitoring.

Before starting theintegration, ensure the following:

• Administrativeaccess to the Palo Alto firewall
• Device hostname or management IP address
• Valid API-enabled username and password
• API access enabled on the firewall
• Network connectivity between Cywift and the firewall

Step 1: Generate APIKey

Cywift usesAPI-based communication for secure data collection.

Enable API Access

Log in to the PaloAlto firewall management interface.

Ensure API access isenabled for the administrator account.

Navigate to:

Device →Administrators

Verify the user hasat least read-only access.

Generate API Key

Run the followingrequest in a browser or API client:

https://<firewall-ip>/api/?type=keygen&user=<username>&password=<password>

Copy and save thegenerated API key.

Validate API Access

Test APIconnectivity:

https://<firewall-ip>/api/?type=op&cmd=<show><system><info></info></system></show>&key=<api-key>

Important Notes:

• Store API keyssecurely
• Use least privilege permissions
• Restrict API access where possible

Step 2: Navigate toIntegrations in Cywift

• Log in to theCywift Platform
• Go to Integration from the left menu
• Under NGFW
• Select PaloAlto
• Click Connect

Step 3: AddIndividual Integration

Use this option whenintegrating a single Palo Alto firewall.

Required Fields

Number ofIntegration
Select Individual Integration

Integration Type
Select NGFW

Collectors
Select a configured collector

Integration System
Select PaloAlto

Alias
Enter a friendly name for the integration

Owner
Select the integration owner

Host Address
Enter the firewall hostname or management IP address

Username
Enter the API-enabled username

Password
Enter the corresponding password

Actions

Test Connection
Verifies API connectivity and authentication

Cancel
Discards configuration

Step 4: Add BulkIntegration

Use this option tointegrate multiple Palo Alto firewalls.

Steps

• Select BulkIntegration
• Choose Integration Type (NGFW)
• Select Collectors
• Choose Integration System: PaloAlto
• Click Download Template
• Fill in the template with required firewall details
• Upload the completed file
• Click Test Connection

Troubleshooting Tips

• Ensure API accessis enabled
• Verify username and password
• Confirm API key generation is successful
• Check network connectivity
• Ensure firewall rules allow HTTPS/API traffic
• Verify management interface accessibility