Adding devices that are managed by the Palo Alto Panorama

Use Configuration Source Management to add devices from the Palo Alto Panorama to IBM® QRadar® Risk Manager.

1. On the navigation menu ( ), click Admin to open the admin tab.
2. On the Admin navigation menu, click Plug-ins or Apps.
   • In IBM Security QRadar V7.3.0 or earlier, click Plug-ins.
   • In IBM Security QRadar V7.3.1, click Apps.
3. On the Risk Manager pane, click Configuration Source Management.
4. On the navigation menu, click Credentials.
5. On the Network Groups pane, click Add a new network group.
   1. Type a name for the network group, and then click OK.
   2. Type the IP address of your Palo Alto Panorama device, and then click Add.
   3. Ensure that the addresses that you add are displayed in the Network address box beside the Add address box.

   The Palo Alto Panorama supports proxy backups.

6. On the Credentials pane, click Add a new credential set.
   1. Type a name for the credential set, and then click OK.
   2. Select the name of the credential set that you created, and then type a valid user name and password for the device.
7. Click OK.
8. Click Discover From Palo Alto Panorama , and then enter the Palo Alto Panorama IP address.

   The Palo Alto Panorama uses the following command for the backup:

   api/?type=op&cmd=<show><devices><connected></connected></devices></show>

9. Click OK.

What to do next

When you add all the required devices, back up the devices, and view them in the topology.