prisma-sdwan-config

Inspect Prisma SD-WAN interfaces, BGP peers, static routes, policies, and security zones.

650|182|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-config
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prisma-sdwan-config
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/prisma-sdwan-config
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-config

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Network engineers need visibility into Palo Alto Networks Prisma SD-WAN fabric configurations without manually logging into controllers, and this Skill provides read-only inspection of interfaces, routing, policies, and security zones through natural language.

Core Features & Use Cases

  • Interface and WAN Circuit Inspection: List LAN/WAN interface configurations, IP addresses, MTU, and circuit bandwidth per site or element.
  • Routing and Policy Auditing: Review BGP peer configurations and states, static routes, policy set assignments, and security zone definitions.
  • Configuration Export: Generate validated YAML exports of site configurations for documentation or backup purposes.
  • Use Case: Before a change window, ask for all BGP peers on hq-router-1 to confirm sessions are established, then export the site configuration as YAML for the change record.

Quick Start

Ask the agent to show the interfaces and BGP peers configured on a specific Prisma SD-WAN site element.

Frequently Asked Questions about prisma-sdwan-config

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check BGP peers on a Prisma SD-WAN device?

Use the get_bgp_peers tool with a site_id and element_id to list BGP peer configurations and session states. You can obtain the required IDs from the prisma-sdwan-topology skill before querying.

How to export Prisma SD-WAN site configuration as YAML?

Call generate_site_config with a site_id and an optional filename to produce a validated YAML export of the site configuration. This is useful for documentation, backups, or change records.

What credentials does Prisma SD-WAN MCP access require?

It requires OAuth2 credentials via the PAN_CLIENT_ID, PAN_CLIENT_SECRET, and PAN_TSG_ID environment variables. The PAN_REGION variable selects americas or europe, defaulting to americas.

Can this skill modify Prisma SD-WAN configurations?

No, all operations are read-only, so no ServiceNow change request gating is required. It only inspects interfaces, routes, policies, and zones, and exports configurations to YAML.

Why does a Prisma SD-WAN query return NOT_FOUND?

NOT_FOUND means the site or element ID does not exist in the fabric. Resolve it by looking up valid IDs through the prisma-sdwan-topology skill before running configuration queries.