Cloudflare

Use Cloudflare data for Cortex AgentiX.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

Cloudflare provides network and security products for consumers and businesses, using reverse proxies for web traffic, edge computing, and a content delivery network. This connector fetches indicators from the Cloudflare feed, connects to a Cloudflare Model Context Protocol (MCP) server to access Cloudflare tools in real time and manages Cloudflare WAF firewall rules, filters, and IP-lists.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• Cloudflare Feed: This connector is available with any active Cortex XSIAM or Cortex AgentiX license.
• Cloudflare MCP: Use this integration to connect securely with a Cloudflare Model Context Protocol (MCP) server and access its tools in real time. This connector is available with any active Cortex XSIAM or Cortex AgentiX license.
• CloudflareWAF: Cloudflare WAF integration allows customers to manage firewall rules, filters, and IP-lists. It also allows to retrieve zones list for each account. This connector is available with any active Cortex XSIAM or Cortex AgentiX license.

To configure this connector, follow the steps outlined in the configuration wizard.