Devo 360 for Palo Alto app

Open

Purpose

The Devo 360 for Palo Alto application brings centralized insights from Palo Alto firewall products.

It is a pre-built knowledge base of dashboards and alerts that delivers real-time visibility and expedites analysis of Devo users’ Palo Alto firewall activity.

It helps you use the Devo Platform to optimize resources and detect threats by automatically aggregating Palo Alto threat definitions, which increases analysts’ efficiency and reduces fatigue as they address alerts.

Prerequisites

To use the Devo 360 Palo Alto, you must have the following lookups installed in your domain, unless you have the Security Operations application, which includes them as part of the installation package:

• SecOps GWL Lookup

• SecOps Location Lookup

• SecOps Alert Description Lookup

• SecOpsAssetRole Lookup

You must also have the following data sources available on your domain:

• firewall.paloalto.system ^{learn more}

• firewall.paloalto.threat ^{learn more}

• firewall.paloalto.traffic ^{learn more}

• firewall.paloalto.all ^{learn more}

Open app

Once the app has been installed, you can use the Open button at the top right of the card in Exchange to access it and use it as intended. You can also access the app via the Navigation pane.

Open

Use app

Once inside the app, you can use it as required. Refer to Devo 360 for Palo Alto for a detailed walkthrough.