paloalto-panorama

Audit Palo Alto Panorama device groups, templates, and policies for compliance.

Updated Feb 28, 2026

Search Tags:#automation #validation #audit #firewall #policies #panorama #paloalto

Ready to run

npx skills add https://github.com/dgethings/netclaw --skill paloalto-panorama-dgethings

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: paloalto-panorama
Source: https://github.com/dgethings/netclaw/tree/main/workspace/skills/paloalto-panorama
Command: npx skills add https://github.com/dgethings/netclaw --skill paloalto-panorama-dgethings

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits Palo Alto Panorama configurations and policies to verify correctness, consistency, and compliance across managed estates.

Core Features & Use Cases

Read-only audits of device groups, templates, security policies, and NAT policies
Validation of commit readiness and change-control gating with ServiceNow
Cross-checks against source-of-truth data and post-change verification

Quick Start

Use the Palo Alto Panorama skill to enumerate device groups, templates, and policies and report findings.

Frequently Asked Questions about paloalto-panorama

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Palo Alto Panorama firewall policies for compliance?▼

You can audit Palo Alto Panorama firewall policies for compliance by performing read-only checks across device groups, templates, security policies, and NAT policies to verify configuration correctness and consistency across managed estates.

Can I validate commit readiness for Panorama configurations before applying changes?▼

Yes, you can validate commit readiness for Panorama configurations by running pre-change reviews that gate workflows, cross-check source-of-truth data, and verify post-change compliance without directly modifying the deployment.

Do I need a Python 3 environment to review Panorama device groups and templates?▼

Yes, reviewing Panorama device groups and templates requires a Python 3 environment along with the PANOS_MCP_CMD, PANOS_HOSTNAME, and PANOS_API_KEY environment variables to authenticate and execute read-only audits.

How does a Panorama configuration audit work with ServiceNow change control?▼

A Panorama configuration audit integrates with ServiceNow change control by validating commit readiness and gating workflows, ensuring that firewall policy changes are cross-checked against compliance requirements before approval.

What is the best way to cross-check Panorama security policies against source-of-truth data?▼

The best way to cross-check Panorama security policies against source-of-truth data is to run automated read-only audits that enumerate device groups and templates, reporting discrepancies and verifying post-change compliance.

Are there limitations when automating Panorama NAT policy audits across managed estates?▼

Limitations when automating Panorama NAT policy audits include the restriction to read-only operations and pre-change reviews, meaning the audit cannot modify or enforce configurations directly within the Panorama-managed deployment.