Automate IT and infrastructure, manage complex workflows, and mitigate risk at scale.
Try the full-featured Puppet Enterprise for free on 10 nodes.
Find and prevent compliance failures
Continuous Delivery for Puppet Enterprise
Build, test, and deploy infrastructure as code faster and easier
Compliance Enforcement Modules
Remediate to stay in compliance
Content & Modules
Pre-built scripts to automate common tasks
Get Puppet Enterprise
First 10 nodes are free!
Try it now
Request a demo
Find thousands of component modules built by the community and guidance on using them in your own infrastructure.
Visit Puppet Forge >>
Open Source Puppet
Perfect for individuals and small infrastructure
Automate tasks in orchestration workflows
See all open source projects >>
Contribute to open source projects >>
Palo Alto Network hardware is incredibly powerful and complex. Most infrastructures have a team of specialists to handle the configuration and ongoing maintenance of this equipment. But siloing this team away from the rest of your IT department causes operational inefficiencies that lead to increased costs, consistency concerns, and dramatically reduced velocity.
As the speed of business increases every year, the resistance to change that these inefficiencies cause becomes more and more of a blocker.
Puppet's supported puppetlabs-panos module allows users to manage Palo Alto Network devices the same way you manage the rest of your infrastructure. It does not replace your team of network experts, but allows them to use the same tools, languages, and deployment pipelines as other teams, dramatically improving collaboration.
The Palo Alto module automates the management of devices running multiple Palo Alto Network OS versions (from 7.1 and 8.1) and provides enhanced consistency in the management of both on-premises and cloud devices. It also supports network security devices using the same desired state management, allowing you to create and update security rules just like any other Puppet resource.
The module uses Puppet's resource API and our device model, meaning that it operates in agentless mode, interacting with Palo Alto firewalls using the PANOS XML API.
Get Support on the Forge