Prisma Cloud instance integration with Cortex XDR/XSIAM failing with error "Invalid Credential"

Prisma Cloud instance integration with Cortex XDR/XSIAM failing with error "Invalid Credential"

201
Created On 09/18/25 23:54 PM - Last Modified 09/11/26 18:24 PM


Symptom


  • Prisma Cloud collector integration is failing in Cortex XDR with the following error:
    PRISMA_CLOUD: Invalid credentials


Environment


  • Cortex XDR
  • Cortex XSIAM
  • Cortex Cloud


Cause


Trusted login IP addresses were enabled in the Prisma Cloud tenant. Cortex XDR IPs need to be allowed for API access.

If the Trusted Login IP Address option is enabled, then any untrusted IP address is denied access to both the management console and API.

This can be confirmed on the Prisma Cloud instance. Additionally, the audit logs in the Prisma cloud instance indicate that access is being denied for Cortex IP addresses.



Resolution


  • Disable 'Trusted Login IP Address' setting, 
    or
  • Add the Cortex XDR IP addresses found here for specific region to the trusted list in the customer's Prisma Cloud tenant.



Additional Information


For additional information view our documentation here. 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000fyC9KAI&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail