>
    Strata Copilot
    Edit Advanced IP Defense Connectivity Settings in Strata Cloud Manager
    Focus
    Download PDF
    Focus
    1. Home
    2. Advanced IP Defense
    3. Edit Advanced IP Defense Connectivity Settings
    4. Edit Advanced IP Defense Connectivity Settings in Strata Cloud Manager
    Download PDF
    Advanced IP Defense

    Edit Advanced IP Defense Connectivity Settings in Strata Cloud Manager

    Table of Contents

    Edit Advanced IP Defense Connectivity Settings in Strata Cloud Manager

    Configure the Advanced IP Defense cloud endpoint and verify connectivity for your Strata Cloud Manager-managed firewalls.
    Before configuring Advanced IP Defense connectivity, ensure:
    • Enforcement points can reach Advanced IP Defense endpoints on TCP 443. If firewalls are behind a proxy, configure proxy settings under ConfigurationDevice SettingsServices.
    • DNS servers are configured and can resolve Advanced IP Defense domain names. For the full list of domains, see Regional Service Domains.
    The Advanced IP Defense connectivity settings control which cloud endpoint your managed firewalls use for real-time IP attribute lookups and direct-to-IP detection. Enforxement points communicate with Advanced IP Defense over TLS on port 443.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationNGFW and Prisma AccessSecurity ServicesAdvanced IP Defense.
    3. Click the Settings tab.
    4. Set the regional service domain FQDN.
      By default, enforcement point uses the global anycast FQDN, which routes lookups to the nearest regional server. You can configure a specific regional FQDN for latency optimization or data residency requirements.
    5. Click Save and Push your changes.

    © 2026 Palo Alto Networks, Inc. All rights reserved.