> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Panda Security

> Connect ThreatAware to Panda Security to monitor endpoint security and threat status

## Overview

The Panda Security integration enables ThreatAware to collect endpoint protection and security data from your Panda Security deployment through the Watchguard Cloud Portal.

<Info>
  **Connection Method**: API
  **Setup Time**: 15 minutes
  **Access Required**: Panda Security Administrator account
</Info>

## Data collected

The Panda Security integration provides:

* Endpoint protection status
* Threat detection and response data
* Security policy compliance
* Antivirus and malware information

## Use cases

<CardGroup cols={2}>
  <Card title="Endpoint Security Monitoring" icon="shield">
    Monitor the security status of all endpoints protected by Panda Security
  </Card>

  <Card title="Threat Detection" icon="triangle-exclamation">
    Track detected threats and security incidents across your environment
  </Card>

  <Card title="Compliance Validation" icon="clipboard-check">
    Verify endpoints comply with security policies
  </Card>

  <Card title="Security Posture Tracking" icon="eye">
    Monitor overall endpoint security health
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Access ThreatAware Integration">
    Begin the integration setup in ThreatAware:

    * Log in to the ThreatAware dashboard
    * Navigate to **Settings → Integrations**
    * Use the search bar to find **Panda**
    * Click **Connect** to open the configuration window
  </Step>

  <Step title="Log in to Watchguard Cloud Portal">
    Access the Panda Security management console:

    * Go to [Watchguard Cloud Portal](https://cloud.watchguard.com/)
    * Sign in with your Panda Security administrator credentials
  </Step>

  <Step title="Enable and Configure API Access">
    Enable API access and generate credentials:

    * Navigate to **Administration** > **Managed Access**
    * Click **Enable API Access**
    * Generate both:
      * **Read-Only password**
      * **Read-Write password**
    * Note the **Read-Only password** for use in ThreatAware

    <Warning>
      Only use the **Read-Only password** for ThreatAware. This provides read-only access to your Panda environment as recommended for security integrations.
    </Warning>
  </Step>

  <Step title="Copy Required API Credentials">
    Gather all API credentials needed:

    * Copy the **Access ID (Read-Only)**
    * Copy the **Authentication API URL**
    * Copy the **API URL (base)**
    * Copy the **API Key**
    * Keep the **Read-Only password** generated in the previous step

    Store these credentials securely for entry into ThreatAware.
  </Step>

  <Step title="Retrieve Account ID">
    Find your Panda Account ID:

    * In the Watchguard Cloud Portal, click **My Account** in the left sidebar
    * Copy the displayed **Account ID**
    * Save this for the next step
  </Step>

  <Step title="Configure in ThreatAware">
    Enter all credentials into ThreatAware:

    * Return to the ThreatAware integration window
    * Fill in the required fields:
      * **Access ID**: Read-Only Access ID from Step 4
      * **Account ID**: Account ID from Step 5
      * **API Password**: Read-Only password from Step 3
      * **Authentication API URL**: From Step 4
      * **API URL**: Base API URL from Step 4
      * **API Key**: From Step 4
    * Click **Connect** to establish the integration
  </Step>

  <Step title="Verify Connection">
    Confirm successful integration:

    * Check that the integration status in ThreatAware shows **Active**
    * Wait 5-10 minutes for initial data synchronization
    * Verify Panda security data appears in ThreatAware
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="Access ID (Read-Only)" icon="user">
    **Field Name**: Panda Access ID
    **Type**: String
    **Description**: The read-only access identifier for API access

    Generated in Watchguard Cloud Portal under:

    * **Administration** > **Managed Access** > API Access settings
  </Accordion>

  <Accordion title="Account ID" icon="building">
    **Field Name**: Panda Account ID
    **Type**: String
    **Description**: Your unique Panda Security account identifier

    Found in the Watchguard Cloud Portal:

    * Click **My Account** in the left sidebar
    * Copy the displayed **Account ID**
  </Accordion>

  <Accordion title="API Password" icon="lock">
    **Field Name**: Panda API Password
    **Type**: Password (encrypted)
    **Description**: The read-only API password for authentication

    Generated in Watchguard Cloud Portal:

    * **Administration** > **Managed Access** > Enable API Access
    * Generate the **Read-Only password**

    <Tip>
      Store this password securely. It provides access to your Panda security data.
    </Tip>
  </Accordion>

  <Accordion title="Authentication API URL" icon="link">
    **Field Name**: Panda Authentication API URL
    **Type**: String
    **Description**: The URL endpoint for API authentication

    Provided in the API Access configuration page
  </Accordion>

  <Accordion title="Base API URL" icon="globe">
    **Field Name**: Panda Base API URL
    **Type**: String
    **Description**: The base URL for all API requests

    Provided in the API Access configuration page
  </Accordion>

  <Accordion title="API Key" icon="key">
    **Field Name**: Panda API Key
    **Type**: Password (encrypted)
    **Description**: The API key for authentication

    Generated in the API Access configuration
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Integration Status**
   * Navigate to **Settings → Integrations** in ThreatAware
   * Confirm Panda shows **Active** status
   * Check the last sync timestamp

2. **Verify Data Collection**
   * Wait 5-10 minutes for initial data synchronization
   * Search ThreatAware dashboard for Panda security data
   * Verify endpoint information matches your Panda deployment

3. **Test Queries**
   * Create a test query to filter endpoints by Panda security status
   * Verify threat data and compliance status are available

## Troubleshooting

<AccordionGroup>
  <Accordion title="Invalid Credentials Error" icon="triangle-exclamation">
    **Symptoms**: Integration fails with authentication error

    **Solutions**:

    * Verify all credentials are copied exactly as shown in Watchguard Portal
    * Ensure there are no extra spaces at the beginning or end of credentials
    * Confirm the API password is the **Read-Only** password, not Read-Write
    * Check that API Access is enabled in **Administration > Managed Access**
    * Regenerate API credentials and try again
  </Accordion>

  <Accordion title="Permission Issues" icon="ban">
    **Symptoms**: Integration connects but no data appears

    **Solutions**:

    * Verify your account has API access permissions
    * Confirm the Read-Only password was generated and enabled
    * Check that your Panda organisation has active endpoints
    * Review Watchguard Cloud Portal logs for any API errors
    * Contact Panda support if permissions are unclear
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect or frequently times out

    **Solutions**:

    * Verify your network allows HTTPS (443) outbound access
    * Check that the API URLs are accessible from your ThreatAware instance
    * Test the URLs in a browser to ensure they're reachable
    * Temporarily disable any corporate proxy or VPN and test
    * Contact Watchguard support if API endpoints are blocked
  </Accordion>

  <Accordion title="No Data After Connection" icon="database">
    **Symptoms**: Integration shows active but endpoint data doesn't appear

    **Solutions**:

    * Wait up to 15 minutes for initial data synchronization
    * Verify you have active endpoints in your Panda deployment
    * Check that endpoints are properly managed in Watchguard Cloud Portal
    * Confirm the account ID belongs to an organisation with endpoints
    * Review ThreatAware integration logs for sync errors
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="Watchguard Cloud Portal" icon="browser" href="https://cloud.watchguard.com/">
    Access your Panda Security management console
  </Card>

  <Card title="Panda Security Documentation" icon="book" href="https://help.watchguard.com/">
    Official Panda Security and Watchguard documentation
  </Card>

  <Card title="API Configuration Guide" icon="gear" href="https://help.watchguard.com/">
    Detailed API setup and configuration instructions
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Use Read-Only Access**

  * Always use the **Read-Only** password for integrations
  * Never use the Read-Write password for external systems
  * Create dedicated Read-Only credentials specifically for ThreatAware
</Tip>

<Tip>
  **Credential Security**

  * Store API credentials in your organisation's password manager
  * Regenerate credentials if you suspect compromise
  * Document where credentials are stored for your team
  * Rotate credentials annually or per your security policy
</Tip>

<Tip>
  **Monitor API Activity**

  * Periodically review Watchguard Cloud Portal logs for API usage
  * Set up alerts for failed API authentication attempts
  * Monitor data synchronization frequency to ensure integration health
</Tip>