Applies To: Palo Alto Appliance, PanOS version (2.0-8.1).
Palo Alto next-generation security hardware and virtual appliances allows you to secure your virtualized and cloud-based computing environments. It uses for networking, security, threat prevention, and management to deliver predictable performance.
EventTracker is an enterprise-class platform that seamlessly combines SIEM, Log Management, File Integrity Monitoring, machine Analytics and so forth.
EventTracker Knowledge Pack for Palo Alto Firewall allows you to monitor the following components:-
Once Palo Alto Firewall is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.
Some of the Knowledge Packs available in EventTracker are listed below.
The configuration details in this guide are consistent with EventTracker Enterprise version 8.x and later, and Palo Alto Appliance, PanOS version (2.0-8.1).
For more information please refer to the Integration guide
To configure Palo Alto Firewall to send logs to EventTracker, refer to the How-to Guide.