diff --git a/crowdsec-docs/static/img/paloalto_step1.png b/crowdsec-docs/static/img/paloalto_step1.png
new file mode 100644
index 000000000..527018602
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step1.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step2.png b/crowdsec-docs/static/img/paloalto_step2.png
new file mode 100644
index 000000000..ac185a73b
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step2.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step3.png b/crowdsec-docs/static/img/paloalto_step3.png
new file mode 100644
index 000000000..1deab01ea
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step3.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step4.png b/crowdsec-docs/static/img/paloalto_step4.png
new file mode 100644
index 000000000..5b2e71fdc
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step4.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step5.png b/crowdsec-docs/static/img/paloalto_step5.png
new file mode 100644
index 000000000..cb82c11a8
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step5.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step6.png b/crowdsec-docs/static/img/paloalto_step6.png
new file mode 100644
index 000000000..72315117d
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step6.png differ
diff --git a/crowdsec-docs/static/img/paloalto_step7.png b/crowdsec-docs/static/img/paloalto_step7.png
new file mode 100644
index 000000000..07d832447
Binary files /dev/null and b/crowdsec-docs/static/img/paloalto_step7.png differ
diff --git a/crowdsec-docs/unversioned/integrations/paloalto.mdx b/crowdsec-docs/unversioned/integrations/paloalto.mdx
index 7cf96084d..93b5f5a12 100644
--- a/crowdsec-docs/unversioned/integrations/paloalto.mdx
+++ b/crowdsec-docs/unversioned/integrations/paloalto.mdx
@@ -3,8 +3,8 @@ id: paloalto
title: Palo Alto
---
-import ThemedImage from "@theme/ThemedImage";
-import useBaseUrl from "@docusaurus/useBaseUrl";
+import ThemedImage from "@theme/ThemedImage"
+import useBaseUrl from "@docusaurus/useBaseUrl"
The CrowdSec Palo Alto integration allows you to block malicious IPs in your Palo Alto firewall. This guide will walk you through the steps to integrate CrowdSec blocklists with your Palo Alto firewall.
@@ -43,11 +43,58 @@ Once the integration is generated you will be presented with a credentials scree
+## Palo Alto Configuration
+
+To configure the paloalto firewall, we will:
+
+1. Create External dynamic list and choose your update frequency.
+
+Go to Objects > External Dynamic Lists > Add
+
+
+
+:::info
+You need to put the username and password provided by the console in the "URL" so it can use basic authentication:
+
+```
+https://:@admin.api.crowdsec.net/v1/integrations//content
+```
+
+:::
+
+
+
+2. Create a security policy with this dynamic list
+
+Go to Policies > Security > Add
+
+
+
+In General tab, add the general info about the policy.
+
+
+
+In Source tab, select your source zone then the dynamic list created in the source address.
+
+
+
+In Actions tab, select the action ‘Drop‘ and log the action (recommended).
+
+
+
+You should have your policy created, don't forget to click on ‘commit‘.
+
+
+
[Palo Alto Documentation](https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/external-dynamic-list#idf36cb80a-77f1-4d17-9c4b-7efe9fe426af)
[Video Tutorial](https://www.youtube.com/watch?v=QFVI4sOFoaI)
@@ -66,4 +113,4 @@ Since CrowdSec is a community-driven project, we welcome contributions to this d
## Next Steps
-Now that you have integrated CrowdSec integration with your Palo Alto Firewall, you can proceed to the [Blocklist Catalog](console/blocklists/catalog.md) to find what blocklists you can subscribe too.
+Now that you have integrated CrowdSec integration with your Palo Alto Firewall, you can proceed to the [Blocklist Catalog](console/blocklists/catalog.md) to find what blocklists you can subscribe too.