Select the tenant/TSG the API call should run against
Add Identity → Identity Type: Service Account
Give it a name that is identifiable during an audit (e.g. bpa-report)
Save the Client ID and Client secret —
the secret is shown only once
Assign a role (the reference guide suggests All Apps & Services
+ Superuser)
The TSG ID appears in the tenant selector on the Identity & Access
screen.
2 · Configuration file
Drop a Tech Support File (.tgz) or configuration XML here, or click to
browse
3 · Report language
Check names and remediation text come from Palo Alto Networks in English
and are shown as provided; the report structure and labels are translated.
Progress
What happens to your data
This tool stores nothing. Neither your credentials, nor your configuration,
nor the report is written to a database or disk. Close the tab and everything
is gone.
Your Tech Support File never leaves your computer. The archive is opened in
your browser; the logs, core dumps and user data inside it are never transmitted.
Only the configuration XML is sent — typically less than 1% of the file.
Your configuration is uploaded to Palo Alto Networks. The analysis runs
there, and the file is written to PANW storage under your own tenant. We
don't retain it, but Palo Alto does — that is how the Posture API works.
Your credentials pass through our server. Palo Alto's endpoints do not allow
direct calls from a browser (CORS is closed), so requests must go through a relay.
That relay stores and logs nothing — but the data does pass through it in transit.
If you would rather it didn't, you can run this tool on your own machine.