---
title: Panda EDR
description: ''
slug: /help/docs/integrations/automation-integrations/panda-edr/
canonical: https://www.sumologic.com/help/docs/integrations/automation-integrations/panda-edr/
---
import useBaseUrl from '@docusaurus/useBaseUrl';

<img src=/help/img/platform-services/automation-service/app-central/logos/panda-edr.png alt="Panda EDR icon" width="100"/>

***Version: 1.4  
Updated: April 30, 2026***

Remotely monitor and manage devices that run these Panda Aether platform endpoint security products:

* Adaptive Defense and Adaptive Defense 360
* Endpoint Protection and Endpoint Protection Plus

## Actions

* **Get Device Protection Status** *(Enrichment)* - Retrieves a list of devices with their protection status and other device information.
* **Get Security Overall Summary** *(Enrichment)* - Retrieves a security overview that includes security event counters for a specified time period.
* **Isolate Specific Devices** (*Containment*) Isolates the specified devices. When you isolate a device, communication to and from the device is denied.
* **List Device Info** *(Enrichment)* - Retrieves a list of devices, and additional information, such as the device IP address and operating system.
* **List Network Unmanaged Devices** *(Enrichment)* - Retrieves a list of unmanaged devices discovered on the network.
* **List Security Events for Specific Devices** *(Enrichment)* - Retrieves a list of security events of the specified type for the specified device for a specific time period.
* **Scan Device** *(Enrichment)*  - Starts a task to scan the specified devices immediately.
* **Start Action On Specified Device** (*Containment*) - Initiates an action on the specified devices. For example, sends an action to reboot a device.
* **Stop Device Isolation** (*Containment*) - Stops isolation on the specified devices.

## Category

EDR

## Configure Panda EDR in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../reuse/automation-service/integration-timeout.md';

<IntegrationsAuth/>
* <IntegrationLabel/>
* **API URL**. Enter the [API URL](https://www.watchguard.com/help/docs/api/Content/en-US/api_get_started/make_requests.html) for WatchGuard, for example, `https://api.usa.cloud.watchguard.com`

* **Access ID**. Enter a WatchGuard [access ID](https://www.watchguard.com/help/docs/api/Content/en-US/api_get_started/authentication.html).

* **Password**. Enter the password for the access ID.

* **WatchGuard API Key**. Enter the [API key associated with your WatchGuard Cloud account](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/mngd-access_enable-API-access.html) (shown on the [Managed Access](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/mngd-access.html) page in WatchGuard Cloud).

* **Account ID**. Enter your WatchGuard Cloud account ID, as shown on the [My Account page](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/sub_acct-mgmt-page.html) in WatchGuard Cloud. For example, `WGC-1-123abc456` or `ACC-1234567`.
* <IntegrationTimeout/>
* <IntegrationCertificate/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src=/help/img/platform-services/automation-service/app-central/integrations/misc/panda-edr-configuration.png style={{border:'1px solid gray'}} alt="Panda EDR configuration" width="400"/>

For information about Panda EDR, see [Panda EDR documentation](https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/edr_core/edr_core_about_c.html).

## Change Log

| Version | Date | Description |
|:--|:--|:--|
| v1.4 | April 30, 2026 | Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance. |
| v1.3 | November 24, 2023 | Fixed a token issue. |
| v1.2 | November 23, 2023 | <ul><li>Fixed bugs that prevented the following actions from working properly: **Stop Device Isolation**, **Start Action On Specified Device**, **Scan Device**, and **Isolate Specific Devices**.</li><li>Extended output mappings.</li><li>Refined labels and hints.</li><li>Improved error handling.</li><li>Refactored and optimized the code.</li><li>Updated the logo.</li></ul> |
| v1.1 | July 7, 2023 | Updated the integration with Environmental Variables. |
| | March 1, 2022 | Initial release of the Panda EDR integration. |