prisma-sdwan-topology

Discovers Prisma SD-WAN sites, ION elements, hardware inventory, and network topology.

650|182|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-topology
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prisma-sdwan-topology
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/prisma-sdwan-topology
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill prisma-sdwan-topology

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Network engineers managing Palo Alto Networks Prisma SD-WAN fabrics lack a quick, natural-language way to inventory sites, ION devices, and hardware without logging into the controller UI or writing API calls manually.

Core Features & Use Cases

  • Site Discovery: List all SD-WAN sites or retrieve details for a specific site, including hub vs spoke roles.
  • Element & Hardware Inventory: Enumerate ION devices per site with serial numbers, models, software versions, and online/offline state.
  • Topology Analysis: Retrieve the full site-to-site topology graph including VPN links and hub-spoke design.
  • Use Case: An engineer preparing for an audit asks for the hardware inventory across the fabric and instantly receives every ION model, serial number, and software version grouped by site.

Quick Start

Ask the agent to show all Prisma SD-WAN sites and the ION devices at each site.

Frequently Asked Questions about prisma-sdwan-topology

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list all Prisma SD-WAN sites and ION devices?

Ask in natural language to show all Prisma SD-WAN sites or list ION routers in the fabric. The get_sites and get_elements tools return sites and devices, which can be filtered by site name or UUID.

How to audit hardware inventory across a Prisma SD-WAN fabric?

Use the get_machines tool to retrieve serial numbers, models, and software versions for all ION hardware. You can also ask which sites run specific models like the ION 3000.

What credentials does Prisma SD-WAN topology discovery require?

It requires OAuth2 credentials: PAN_CLIENT_ID, PAN_CLIENT_SECRET, and PAN_TSG_ID. Set PAN_REGION to americas or europe depending on your deployment; tokens auto-refresh with a 50-minute TTL.

Can this skill modify Prisma SD-WAN configuration?

No, all operations are read-only, so no ServiceNow change-request gating is required. For configuration changes, use companion skills like prisma-sdwan-config.

Why does Prisma SD-WAN authentication fail with AUTH_FAILED?

AUTH_FAILED means OAuth2 authentication failed, so verify PAN_CLIENT_ID, PAN_CLIENT_SECRET, and PAN_TSG_ID. A REGION_MISMATCH error indicates you should set PAN_REGION=europe for EU deployments.