topic Re: What permissions are required on the firewall for the account that Splunk for Palo Alto Networks uses? in All Apps and Add-ons

What permissions are required on the firewall for the account that Splunk for Palo Alto Networks uses?

ubnt_bane — Thu, 23 Jul 2015 21:47:21 GMT

What permissions are required on the firewall for the account that Splunk for Palo Alto Network uses?

Re: What permissions are required on the firewall for the account that Splunk for Palo Alto Networks uses?

itradeclayton — Sun, 11 Feb 2018 19:23:04 GMT

I'm looking for this answer too. Did you ever find it?

Re: What permissions are required on the firewall for the account that Splunk for Palo Alto Networks uses?

shirishkamat84 — Mon, 12 Mar 2018 22:56:00 GMT

as per the document from developer, the account needs the below xml api privileges.

Feature Permission Needed
Commands: pantag, panuserupdate User-ID Agent
Alert Action - Tag to Dynamic Address List User-ID Agent
Command: pancontentpack with PAN-OS < 8.0 Configuration
Command: pancontentpack with PAN-OS >= 8.0 Configuration and Operational Requests

https://splunk.paloaltonetworks.com/adaptive-response.html

Re: What permissions are required on the firewall for the account that Splunk for Palo Alto Networks uses?

shirishkamat84 — Wed, 14 Mar 2018 21:56:45 GMT

can you please explain what you are trying to do, based on that we can answer the access problem. I followed the steps mentioned in the document and was able to configure the TA with firewall\panorama.