Configure the Xpanse Prisma Cloud API Connector - User Guide - 1.0 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse User Guide

Product
Cortex XPANSE
Version
1.0
Creation date
2022-08-25
Last date published
2024-03-26
End_of_Life
EoL
Category
User Guide
Abstract

Configure the Cortex Xpanse XDR API connector to enable Xpanse to ingest Prisma Cloud data.

Before configuring the Prisma Cloud API connector in Cortex Xpanse, you must generate an API access key and secret key in Prisma Cloud. See Generate an API Access Key in Prisma Cloud.

Complete this task in Cortex Xpanse Expander to configure the API connector for Prisma Cloud.

  1. In Expander, navigate to Settings, and click Add API Key.

  2. On the API Connectors page, select Prisma Cloud as the source type, and then click Next.

  3. On the API Connectors/Source Type/Add New window, complete the information as follows:

    1. Enter a descriptive Name of your choice.

    2. In the Access Key ID field, enter your Prisma Cloud API access key ID.

    3. In the Secret Key field, enter your Prisma Cloud secret key.

    4. In the Service URL field, enter the URL for your Prisma Cloud instance.

    5. In the Business Unit field, select the business unit you’d like to associate the devices with in Xpanse.

    add-new-api-connector-prisma-cloud.png
  4. Click Add API Key to add the connector.

    Prisma Cloud data may take up to 48 hours to be ingested into your Cortex Xpanse Expander instance.