An architect is integrating Cortex XSOAR with Palo Alto Networks Panorama to automate firewall rule creation. A playbook needs to check if a security policy rule already exists before creating a new one. Which Cortex XSOAR integration command should the architect use to query the existing rules on Panorama?
Trap 1: xdr-get-firewall-rules
Cortex XDR commands deal with endpoints and alerts, not direct firewall policy querying.
Trap 2: panorama-list-policies
This is not a standard integration command name for the PAN-OS integration pack.
Trap 3: fw-query-rules
Generic commands do not map to the official Palo Alto Networks integration naming convention.
- A
xdr-get-firewall-rules
Why it fails: Cortex XDR commands deal with endpoints and alerts, not direct firewall policy querying.
- B
panorama-list-policies
Why it fails: This is not a standard integration command name for the PAN-OS integration pack.
- C
pan-os-get-security-rules
The `pan-os-get-security-rules` command queries Panorama's rulebase directly, returning existing security policy rules so the playbook can test for a match before creating anything. This satisfies the stem's requirement to check whether a rule already exists, avoiding duplicates. Other pan-os commands handle commits, object definitions or log retrieval, not rule enumeration.
- D
fw-query-rules
Why it fails: Generic commands do not map to the official Palo Alto Networks integration naming convention.