NGFW and Panorama

1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
2. Select AssetsActivate/Provision Subscriptions and Add-ons.
3. Enter the auth code from your Advanced IP Defense order and choose Submit.
4. Select the enforcement point serial number to associate with the Advanced IP Defense license and choose Activate.

   If you have multiple enforcement points, repeat this step for each serial number you want to license. If your license covers multiple enforcement points, you can assign each license to a different serial number or allocate multiple licenses to the same tenant service group (TSG).
5. Retrieve the license on the enforcement point.

   For enforcement points managed by PAN-OS directly, select DeviceLicenses and choose Retrieve license keys from license server.

   For enforcement points managed by Strata Cloud Manager, Strata Cloud Manager retrieves the license automatically after you activate it in the CSP and the next synchronization cycle completes.

   For enforcement points managed by Panorama, push the license retrieval from PanoramaDevice DeploymentLicenses.
6. Install the latest content update on the enforcement point.

   The content update delivers the Advanced IP Defense IP attribute category definitions and the default Advanced IP Defense security profile. Without the latest content, you cannot access the Advanced IP Defense configuration options or the default profile.

   For enforcement points managed by PAN-OS directly, select DeviceDynamic Updates and choose Check Now, then install the latest Applications and Threats update.
7. Configure and deploy Advanced IP Defense on your enforcement points.

   After activating the license and installing the latest content update, you can create or assign an Advanced IP Defense security profile and attach it to one or more enforcement point zones.