Palo Alto Networks Cortex Xpanse

Palo Alto Networks Cortex Xpanse is an Attack Surface Management (ASM) product from Palo Alto Networks. Xpanse provides a complete, accurate and continuously updated inventory of all global internet-facing assets. This allows you to discover, evaluate and mitigate cyber attack surface risks. You can also evaluate supplier risk and assess the security of acquired companies.

Configuring the Connector for Cortex Xpanse

To configure Lucidum to ingest data from Cortex Xpanse:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • Host (required): The hostname or IP address of the Palo Alto Networks Cortex Xpanse server

   • Client ID and Client Secret (required): Palo Alto Networks Cortex Xpanse API client ID and secret

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.