Frequently Asked Questions (FAQ)

Q: What is the Palo Alto Device Server? A: The Palo Alto Device Server is a Model Context Protocol (MCP) server that facilitates the management of Palo Alto firewalls via their REST API. It enables system information retrieval, firewall upgrades, content updates, and certificate management.

Q: What are the prerequisites for installing the Palo Alto Device Server? A: You need Node.js, TypeScript, a Palo Alto firewall with REST API access, and an API key for authentication.

Q: How do I install the Palo Alto Device Server? A: You can install it manually using npm install or automatically via Smithery using the provided npx command.

Q: What environment variables are required to run the server? A: The server requires PANOS_API_KEY (your Palo Alto firewall API key) and PANOS_API_BASE_URL (base URL for the Palo Alto REST API).

Q: What tools are available in the Palo Alto Device Server? A: Available tools include get_system_info, upgrade_firewall, upgrade_ha_firewalls_from_panorama, check_install_content_updates, manage_certificates, and run_operational_mode_command.

Q: What is MCP and how does it relate to the Palo Alto Device Server? A: MCP (Model Context Protocol) is an open protocol that standardizes how applications provide context to LLMs. The Palo Alto Device Server uses MCP to provide structured data about Palo Alto firewalls to AI Agents, enabling intelligent automation.

Q: How does the Palo Alto Device Server integrate with UBOS? A: When integrated with the UBOS platform, the Palo Alto Device Server enables you to build custom AI Agents that automate complex security tasks, proactively defend your network, and leverage AI for threat detection and incident response.

Q: Can I automate firewall upgrades with this server? A: Yes, you can automate PAN-OS upgrades, either scheduled or on-demand, ensuring your firewall benefits from the latest security patches and performance enhancements. You can even orchestrate upgrades across multiple HA firewalls through Panorama.

Q: How can I keep my firewall’s content definitions up-to-date? A: The check_install_content_updates tool automates the process of checking and installing content updates, including threat signatures and application definitions.

Q: What kind of certificate management does the server support? A: The server supports managing firewall certificates, automating tasks such as certificate renewal and revocation, preventing outages, and ensuring secure communication.