This template is designed for the effortless deployment of Palo Alto PA-440 monitoring by Zabbix via XML API and doesn't require any external scripts.

Setup:

Configure a user for monitoring. Note that in order to retrieve the device certificate information, superuser privileges are required. If you opt for a user with limited access (for security reasons), the device certificate expiration metrics will not be discovered.

Superuser privileges user (full access to all data):
1. Add a new administrator user. Go to "Device" > "Administrators" and click "Add".
2. Enter the necessary details. Set the "Administrator Type" to "Dynamic" and select the built-in "Superuser" role. Commit the changes.

Limited privileges user (no access to device certificate data):
1. Create a new Admin Role. Go to "Device" > "Admin Role" and click "Add".
2. Enter the necessary details. Adjust the list of permissions:
- Restrict access to all sections in the "Web UI" tab
- Allow access to the "Configuration" and "Operational Requests" sections in the "XML API" tab
- Check that the access to CLI is set to "None" in the "Command Line" tab
- Restrict access to all sections in the "REST API" tab
3. Add a new administrator user. Go to "Device" > "Administrators" and click "Add".
4. Enter the necessary details. Set the "Administrator Type" to "Role Based" and select the profile that was created in the previous steps. Commit the changes.

Set the host macros:
1. Set the firewall XML API endpoint URL in the "{$PAN.PA440.API.URL}" macro in the format "<scheme>://<host>[:port]/api" (port is optional).
2. Set the name of the user that you created in the "{$PAN.PA440.USER}" macro.
3. Set the password of the user that you created in the "{$PAN.PA440.PASSWORD}" macro.

For more details about PAN-OS API, refer to the official documentation:
https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-panorama-api

Generated by official Zabbix template tool "Templator"