automateyournetwork/prisma-sdwan-apps

Prisma SD-WAN Application Visibility

View application definitions in your Palo Alto Networks Prisma SD-WAN fabric. Understand which applications are defined for policy enforcement, their categories, and risk levels.

When to Use

• Listing all application definitions in the fabric
• Finding applications by name or category
• Understanding application risk classifications
• Reviewing SaaS vs on-premise application types
• Auditing application categories for policy decisions

MCP Server

• Server: prisma-sdwan-mcp (community MCP from iamdheerajdubey)
• Command: python3 -u mcp-servers/prisma-sdwan-mcp/src/prisma_sdwan_mcp/server.py (stdio transport)
• Auth: OAuth2 via PAN_CLIENT_ID, PAN_CLIENT_SECRET, PAN_TSG_ID
• Region: PAN_REGION (americas or europe, default: americas)

Available Tools

| Tool | Parameters | What It Does | |------|------------|--------------| | get_app_defs | None | List all application definitions with categories and risk |

Workflow Examples

Application Discovery

# List all applications
"Show me all SD-WAN application definitions"

# Find specific application
"Is Office 365 defined as an application?"

# List by category
"What business applications are defined?"

Risk Analysis

# Find high-risk applications
"Which applications are classified as high risk?"

# Review SaaS applications
"List all SaaS application definitions"

Policy Planning

# Understand categories
"What application categories are available for policies?"

# Review productivity apps
"Show me all productivity category applications"

Integration with Other Skills

• prisma-sdwan-config: View policies that reference these applications
• prisma-sdwan-topology: Understand where policies are applied
• prisma-sdwan-status: Check if app-based policies are working

Response Examples

Application Definitions Response

{
  "applications": [
    {
      "id": "app001",
      "name": "office365",
      "display_name": "Microsoft Office 365",
      "category": "business",
      "subcategory": "productivity",
      "risk": "low",
      "app_type": "saas"
    },
    {
      "id": "app002",
      "name": "zoom",
      "display_name": "Zoom Video Communications",
      "category": "business",
      "subcategory": "conferencing",
      "risk": "low",
      "app_type": "saas"
    }
  ],
  "total_count": 250
}

Error Handling

| Error Code | Meaning | Resolution | |------------|---------|------------| | AUTH_FAILED | OAuth2 authentication failed | Verify PAN_CLIENT_ID, PAN_CLIENT_SECRET, PAN_TSG_ID | | RATE_LIMITED | API rate limit exceeded | Wait and retry |

Notes

• Read-only operations - no ServiceNow CR gating required
• Application definitions are fabric-wide (not per-site)
• Risk levels: low, medium, high
• App types: saas, on-premise, custom
• All operations logged to GAIT audit trail