prisma-sdwan-apps

Lists Prisma SD-WAN application definitions with categories and risk levels.

650|182|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-apps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prisma-sdwan-apps
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/prisma-sdwan-apps
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-apps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Network engineers need visibility into which applications are defined in their Palo Alto Networks Prisma SD-WAN fabric before they can build or audit application-aware policies, but manually querying the controller for application definitions, categories, and risk classifications is slow and error-prone.

Core Features & Use Cases

  • Application Discovery: List all application definitions in the fabric via the get_app_defs tool, including display names, categories, subcategories, and app types (SaaS, on-premise, custom).
  • Risk Classification Review: Identify high-risk applications and review risk levels (low, medium, high) to inform security policy decisions.
  • Policy Planning Support: Understand available application categories before writing SD-WAN policies, and audit SaaS versus on-premise application types.
  • Use Case: Before creating a new QoS policy, ask which business-category applications are defined in the fabric to confirm Office 365 and Zoom are available as policy match criteria.

Quick Start

Ask the agent to show all Prisma SD-WAN application definitions and their risk levels.

Frequently Asked Questions about prisma-sdwan-apps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list application definitions in Prisma SD-WAN?

Use the get_app_defs tool from the prisma-sdwan-mcp server to list all application definitions in the fabric. It returns each application's name, category, subcategory, risk level, and type without requiring per-site queries.

What credentials are required for Prisma SD-WAN API access?

You need OAuth2 credentials: PAN_CLIENT_ID, PAN_CLIENT_SECRET, and PAN_TSG_ID from your Palo Alto Networks account. Optionally set PAN_REGION to americas or europe, with americas as the default.

Can I filter Prisma SD-WAN applications by risk level?

Yes, after retrieving application definitions you can ask for high-risk applications specifically. Each application carries a risk classification of low, medium, or high that you can use for security policy review.

Does this skill modify Prisma SD-WAN configuration?

No, all operations are read-only, so no ServiceNow change request gating is required. It only retrieves application definitions and never writes policy or configuration changes to the fabric.

Why does Prisma SD-WAN authentication fail with AUTH_FAILED?

AUTH_FAILED means OAuth2 authentication was rejected by the controller. Verify that PAN_CLIENT_ID, PAN_CLIENT_SECRET, and PAN_TSG_ID are correct and that the service account has API access enabled.