AlienVault® USM Anywhere™

Configuring the AlienApp for Palo Alto Networks

Role Availability Read-Only Analyst Manager

When the AlienApp for Palo Alto Networks is enabled and connected to your Palo Alto Networks environment, you can launch app actions and create orchestration rules to send data from USM Anywhere to your Palo Alto device. For more information about the orchestration actions supported by the AlienApp for Palo Alto Networks, see AlienApp for Palo Alto Networks Orchestration.

Note: To fully integrate USM Anywhere with your Palo Alto Networks device, you should also have the Palo Alto Networks PAN-OS log collection enabled so that USM Anywhere can retrieve and normalizeNormalization describes the translation of log file entries received from disparate types of monitored assets into the standardized framework of Event types and sub-types. the raw log data. For information about enabling this raw log data retrieval, see Collecting Logs from Palo Alto Networks.