What you can do with Palo Alto Networks
Every task in plain language. Pick one, and we can help you get access.
3,934 things you can do
Palo Alto Networks
Palo Alto Networks is a global cybersecurity leader providing advanced security platforms and services across network security, cloud security, and security operations. Its developer platform at pan.dev offers REST and XML APIs for PAN-OS firewalls, Strata Cloud Manager, Prisma Cloud (CSPM, CWPP, code security), Prisma Access and SD-WAN for SASE, Cortex XDR/XSOAR/XSIAM for security operations, and
11 multi-step recipesRecipes: multi-step jobs
Cortex XDR Endpoint Isolation and VerificationIsolate a Cortex XDR endpoint and verify the isolation took effect.Cortex XDR Incident Triage and Resolution
Triage a Cortex XDR incident end to end, from listing through resolution.Cortex XDR Script Remediation with Result Polling
Execute a Cortex XDR script on matched endpoints and collect the results.Cortex XDR XQL Threat Hunt
Execute an XQL query and retrieve its results once complete.Cortex XSIAM Incident-Driven Asset and XQL Hunt
Pivot from XSIAM incidents to assets and an XQL hunt with result polling.Cortex XSOAR Incident Response Orchestration
Create an XSOAR incident, run a playbook, and add a war room entry.IoT Security Alert Investigation and Resolution
Investigate an unresolved IoT Security alert and mark it resolved.IoT Security Device Risk and Policy Recommendation
Review an IoT device's risk detail and its policy recommendations.Prisma Cloud Alert Triage and Dismissal
Triage a Prisma Cloud alert from login through dismissal.Prisma Cloud Policy Review and Update
Review a Prisma Cloud policy and update its severity and enabled state.Prisma Cloud RQL Configuration and Asset Search
Run an RQL config search and an RQL asset search against Prisma Cloud.
Cybersecurity Management
Create a WildFire and antivirus profileUpdate a WildFire and antivirus profileDelete a WildFire and antivirus profileCreate a WildFire antivirus profileEdit a WildFire antivirus profileDelete a WildFire antivirus profileCreate a data profileReplace a data profilePartially update a data profileCreate a connector groupUpdate a connector groupDelete a connector groupChange a connector group's scheduled upgradeSchedule an upgrade for a connector groupCancel a connector group's scheduled upgradeGenerate a data snippet for an objectUpdate a GlobalProtect authentication settingCreate a GlobalProtect authentication settingDelete a GlobalProtect authentication settingReorder a GlobalProtect authentication settingCreate a custom data patternReplace a data patternArchive a data patternPartially update a data patternCreate a custom prompt setUpdate a custom prompt setArchive or unarchive a prompt setAdd a prompt to a custom prompt setUpdate a custom promptDelete a custom promptCreate a new prompt property nameAdd a value to a prompt propertyBulk upload prompts to a prompt set from CSVAdd a manual tag to devicesRemove a manual tag from devicesResolve an IoT security alertResolve vulnerability instancesBulk update devices from Cisco DNAC or PrimeBulk update devices from Cisco WLAN controllersBulk update devices from Aruba WLAN controllersBulk update devices from SNMP switch dataBulk update cellular devicesBulk update devices from SCCMBulk update devices from CrowdStrike FalconBulk update subnets from Infoblox IPAMBulk set custom attribute values on devicesBulk update network discovery node graphsBulk update network discovery L2/L3 dataBulk update network discovery endpointsUpload a device vulnerability scan reportReport profile ACL sync job statusReport third-party scanner detailsUpdate firewall security rulesPurge firewall rules not in a kept listMerge third-party CVE findings into devicesSync XSOAR playbook status to IoTUpdate a custom attribute definitionCreate a custom attributeDelete a custom attributeUpdate site definitionsCreate site definitionsDelete site definitionsUpdate a network segment definitionCreate a network segment definitionDelete a network segment definitionUpdate a subnet definitionCreate a subnet definitionDelete a subnet definitionTransfer a subnet to a shared IP blockRevert a shared block to unsharedReplace custom vulnerability rules (v34.03)Replace custom malware signatures (v34.03)Replace custom vulnerability rules (v34.04)Replace custom malware signatures (v34.04)Create a HIP profileUpdate a HIP profileDelete a HIP profileCreate a HIP profileEdit a HIP profileDelete a HIP profileGenerate a CSV report of SaaS accountsOpen a remediation ticket for a SaaS instanceDelete or unlink SaaS instance ticketsUpdate a GlobalProtect agent profileCreate a GlobalProtect agent profileDelete a GlobalProtect agent profileUpdate a posture check's statusCreate an FQDN-based ZTNA access ruleCreate a zone protection profileUpdate a zone protection profileDelete a zone protection profileCreate a security rule in a rulestackUpdate a security rule at a priorityDelete a security rule at a priorityCreate an FQDN list in a rulestackUpdate an FQDN list in a rulestackDelete an FQDN list from a rulestackCreate a certificate profileUpdate a certificate profileDelete a certificate profileCreate a certificate profileModify a certificate profileDelete a certificate profileCreate a firewall rule stackUpdate a rule stack's configurationDelete a rule stackCommit a rule stack to running configCreate a security zoneUpdate a security zoneDelete a security zoneCreate an AI security profileDelete an AI security profileUpdate an AI security profileForce delete an AI security profileAdd a URL admin overrideDelete a URL admin overrideCreate a data filtering profileUpdate a data filtering profileDelete a data filtering profileCreate a browser deploymentUpdate a browser deploymentDelete a browser deploymentCreate a ZTNA connector and install tokenUpdate a ZTNA connectorDelete a ZTNA connectorSchedule a ZTNA connector software upgradeCreate a certificate issuing templateOverwrite an issuing templateDelete an issuing templateSync issuing template domains from a CACreate a security profile groupUpdate a security profile groupDelete a security profile groupCreate a security profile groupEdit a security profile groupDelete a security profile groupCreate a cloud NGFW firewallDelete a cloud NGFW firewallUpdate a firewall's descriptionChange a firewall's subnet mappingsCreate a vulnerability protection profileUpdate a vulnerability protection profileDelete a vulnerability protection profileCreate a vulnerability protection profileEdit a vulnerability protection profileDelete a vulnerability protection profileCreate a rulestackUpdate a rulestack's configurationDelete a rulestackCommit rulestack changesDiscard uncommitted rulestack changesUpload a new dictionary fileReplace a dictionary with a new fileDelete a dictionaryEdit a dictionary's metadataCreate a decryption exclusionUpdate a decryption exclusionDelete a decryption exclusionCreate a decryption exclusionEdit a decryption exclusionDelete a decryption exclusionAdd Defenders to an ACI container group YAML (v34.03)Generate an App-Embedded Defender Dockerfile (v34.03)Add Defenders to a Cloud Run service YAML (v34.03)Generate a Defender DaemonSet YAML (v34.03)Add Defenders to an EKS Fargate manifest (v34.03)Protect an ECS Fargate task definition in JSON (v34.03)Protect an ECS Fargate task definition in YAML (v34.03)Generate a Defender Helm chart (v34.03)Generate a serverless Defender bundle (v34.03)Upgrade all connected single Linux Defenders (v34.03)Delete a Defender (v34.03)Update a Defender's features (v34.03)Restart a Defender (v34.03)Upgrade one Defender (v34.03)Add Defenders to an ACI container group YAML (v34.04)Generate an App-Embedded Defender Dockerfile (v34.04)Add Defenders to a Cloud Run service YAML (v34.04)Generate a Defender DaemonSet YAML (v34.04)Add Defenders to an EKS Fargate manifest (v34.04)Protect an ECS Fargate task definition in JSON (v34.04)Protect an ECS Fargate task definition in YAML (v34.04)Generate a Defender Helm chart (v34.04)Generate a serverless Defender bundle (v34.04)Upgrade all connected single Linux Defenders (v34.04)Delete a Defender (v34.04)Update a Defender's features (v34.04)Restart a Defender (v34.04)Upgrade one Defender (v34.04)Create a ZTNA connector groupUpdate a connector groupDelete an empty connector groupSet the file blocking action for a file typeUpdate trusted images and registries (v34.03)Update trusted images and registries (v34.04)Create a DNS security profileUpdate a DNS security profileDelete a DNS security profileCreate a DNS security profileEdit a DNS security profileDelete a DNS security profileCreate an Enterprise Browser application groupDelete an Enterprise Browser application groupPartially update a browser application groupCreate a firewall application groupReplace a firewall application groupDelete a firewall application groupCreate an application groupEdit an application groupDelete an application groupCreate a prefix listImport certificates with private keysCreate an external dynamic listUpdate an external dynamic listDelete an external dynamic listCreate an external dynamic listEdit an external dynamic listDelete an external dynamic listCreate a DoS protection ruleUpdate a DoS protection ruleDelete a DoS protection ruleCreate a certificate revocation approval ruleUpdate a certificate revocation approval ruleDelete a certificate revocation approval ruleTurn data scanning on or off for resourcesCreate a data pattern in my tenantClone a data pattern in my tenantUpdate a data pattern in my tenantDelete a data pattern from my tenantEnable or disable data profilesCreate a data profile in my tenantUpdate a data profile in my tenantClone a data profile in my tenantDelete a data profile from my tenantChange my snippet masking settingsClone a data pattern for a DSS tenantCreate a data pattern for a DSS tenantUpdate a data pattern in a DSS tenantDelete a data pattern from a DSS tenantEnable or disable profiles in a DSS tenantCreate a data profile for a DSS tenantUpdate a data profile in a DSS tenantClone a data profile in a DSS tenantDelete a data profile from a DSS tenantChange snippet masking for a DSS tenantUpdate resource scan settings (v3)Set the resource size reporting frequencyCreate an application filterUpdate an application filterDelete an application filterCreate an application filterEdit an application filterDelete an application filterCreate an FQDN list in a rule stackCreate a certificate object in a rulestackUpdate a rulestack certificate objectDelete a rulestack certificate objectCreate a decryption profileUpdate a decryption profileDelete a decryption profileCreate a decryption profileEdit a decryption profileDelete a decryption profileCreate a ZTNA connectorUpdate a ZTNA connectorDelete a ZTNA connectorQuiesce or resume a ZTNA connectorReschedule a connector upgradeSchedule a connector upgradeCancel a connector's scheduled upgradeStart a packet capture on a connectorStop a running packet captureGenerate a connector tech support fileStop tech support file generationCreate a Prisma Access security ruleUpdate a Prisma Access security ruleDelete a security ruleReorder a security rule in the rulebaseCreate a security rule via the SSE config APIEdit a security rule via the SSE config APIDelete a security rule via the SSE config APIReorder a security rule in the rulebaseAdd a security rule to a Cloud NGFW rulestackUpdate a Cloud NGFW rulestack ruleDelete a Cloud NGFW rulestack ruleReplace an address object's definitionCreate a firewall address objectDelete a firewall address objectReplace an address group definitionCreate a static or dynamic address groupDelete a firewall address groupUpdate a service object's portsCreate a TCP or UDP service objectDelete a service objectUpdate a service group's membersCreate a service groupDelete a service groupUpdate a tag's color or commentCreate a tag for grouping objectsDelete a tagLink an AWS account to Cloud NGFWUnlink an AWS account from Cloud NGFWCreate a Cloud NGFW firewallCreate a legacy V1 firewall in a VPCDelete a firewall by its IDUpdate a firewall's settings by IDAssociate a link with a firewallDisassociate a link from a firewallUpdate a firewall's log profile by IDAttach a rulestack to a firewall by IDDetach a rulestack from a firewall by IDDelete a firewall by its nameUpdate a firewall's App-ID content versionChange a firewall's descriptionConfigure feature flags on a firewallUpdate a firewall's log profile by nameAttach a rulestack to a firewall by nameChange a firewall's subnet mappingsAdd tags to a firewallRemove tags from a firewallUpdate host app control rules (v34.03)Delete a host app control rule (v34.03)Update host app control rules (v34.04)Delete a host app control rule (v34.04)Create a Cloud NGFW firewall in a VPCUpdate an existing Cloud NGFW firewallDelete a Cloud NGFW firewallAttach a global rulestack to a Cloud NGFWAttach a local rulestack to a Cloud NGFWCreate a dynamic user groupUpdate a dynamic user groupDelete a dynamic user groupCreate a tag-based dynamic user groupEdit a dynamic user groupDelete a dynamic user groupCreate a file blocking profileUpdate a file blocking profileDelete a file blocking profileCreate a file blocking profileEdit a file blocking profileDelete a file blocking profileRequest TLS validation of certificate installationsCreate a custom vulnerability signatureUpdate a vulnerability protection signatureDelete a vulnerability protection signatureCreate a custom vulnerability signatureEdit a custom vulnerability signatureDelete a custom vulnerability signatureCreate an alert ruleUpdate an alert ruleDelete an alert ruleCreate an endpoint policyReplace an endpoint policy in fullDelete an endpoint policyPartially update an endpoint policyQuarantine a deviceRelease a device from quarantineQuarantine a deviceRelease a device from quarantineUpdate an Email DLP incident's statusCreate a DoS protection profileUpdate a DoS protection profileDelete a DoS protection profileCreate a 5G security policyUpdate a 5G security policyDelete a 5G security policyCreate a HIP objectUpdate a HIP objectDelete a HIP objectCreate a HIP objectEdit a HIP objectDelete a HIP objectCreate a decryption ruleUpdate a decryption ruleDelete a decryption ruleReorder a decryption ruleCreate a decryption ruleEdit a decryption ruleDelete a decryption ruleReorder a decryption ruleGenerate a certificate in a Prisma Access SSE folderDelete a certificate from Prisma Access SSE configImport a certificate into a Prisma Access SSE folderGenerate a signed certificate in Strata Cloud ManagerImport a certificate into Strata Cloud ManagerDelete a Strata Cloud Manager certificateExport a managed certificateRequest TLS validation of certificatesRetire certificates from active useRecover retired certificatesPermanently delete retired certificatesCreate an Issuer configurationRemove an Issuer configurationUpdate an Issuer configurationRequest a new or renewed certificateResubmit a certificate requestRelearn container runtime profiles (v34.03)Relearn runtime container profilesCreate a DNS resolver profileUpdate a DNS resolver profileShowing 400 of 3,923. Search above to find the rest.