Activate the AI Access Security License
Focus
Focus
AI Access Security

Activate the AI Access Security License

Table of Contents

Activate the AI Access Security License

Activate the AI Access Security for new and existing users.
Where Can I Use This?What Do I Need?
  • NGFW (Managed by Panorama or Strata Cloud Manager)
  • Prisma Access (Managed by Panorama or Strata Cloud Manager)
One of the following:
  • AI Access Security license
  • CASB-PA license
  • CASB-X license
Activate your AI Access Security license to enable your organization to safely adopt generative AI (GenAI) applications by your employees. AI Access Security activation is performed using a magic link provided by Palo Alto Networks after purchase of the AI Access Security license. These procedures assume you already have all the required license auth codes and magic links required for activation.
After you purchase your AI Access Security license, you must activate the license using a magic link sent to you by Palo Alto Networks. AI Access Security is included when you activate a CASB-PA or CASB-X license. No further action is required to activate the AI Access Security after you activate a CASB-PA or CASB-X license.

Activate the AI Access Security License (New Deployments)

Activate the AI Access Security for a new NGFW (Managed by Panorama) or NGFW (Managed by Strata Cloud Manager) user.
  1. Install and perform the initial configuration for your NGFW.
    This includes activating all the required support licenses.
  2. Set up management for your NGFW or Prisma Access tenant.
  3. Set up Enterprise Data Loss Prevention (E-DLP).
    • NGFW (Managed by Panorama)
      1. Install the Enterprise DLP plugin on Panorama.
      2. Enable Enterprise DLP for NGFW.
      3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
    • NGFW (Managed by Strata Cloud Manager)
      1. Enable Enterprise DLP for NGFW.
      2. Edit the Enterprise DLP data filtering and snippet settings as needed.
    • Prisma Access (Managed by Panorama)
      1. Install the Enterprise DLP plugin on Panorama.
      2. Enable Enterprise DLP for Prisma Access.
      3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
    • Prisma Access (Managed by Strata Cloud Manager)
      1. Enable Enterprise DLP for NGFW.
      2. Edit the Enterprise DLP data filtering and snippet settings as needed.
  4. Click the magic link provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
  5. Click Activate Subscription to begin activating AI Access Security.
  6. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the magic link to activate AI Access Security.
    Create a New Account if the email address that received the AI Access Security activation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activating AI Access Security and assigned a Multitenant Superuser role.
  7. (Multitenancy only) In the Customer Support Account section, select the Palo Alto Networks Customer Support Account associated with the tenant for which you activating the AI Access Security license.
    Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
  8. (Multitenancy only) In the Allocate This Subscription section, select the tenant service group (TSG) for which you want to activate AI Access Security. You can select the parent tenant or a child tenant.
    AI Access Security is activated for only the selected tenant. If you select a parent tenant, AI Access Security isn't activated for any child tenant.
    Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
  9. Review the tenant Region. This region is pre-populated based on the deployed NGFW or Prisma Access tenant region and can't be changed.
  10. In the Assign Licenses section, click Done to assign all your AI Access Security licenses. Verify that your AI Access Security License is Fully Assigned
  11. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.
    Your Enterprise DLP instance is selected by default if active already on your tenant.
    Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.
  12. Agree to the Terms and Conditions.
  13. Activate.
    You're redirected to the Tenant Management page where the AI Access Security Activation Status starts Initializing.
    The AI Access Security license displays as Data Security and has a serial number that begins with AIX. Continue to the next step after the Activation Status is Complete.
  14. (NGFW only) Associate the AI Access Security license with your NGFW.
    Associating the AI Access Security license is required to activate the license for your NGFW.
    1. In the Strata Cloud Manager menu, select SettingsDevice Associations.
      The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
    2. Associate Apps.
    3. In the Licensed Products, select Data Security.
    4. Select the NGFW for which you want to activate AI Access Security.
    5. Save.
  15. Verify you successfully activated AI Access Security.
    1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
    2. Select ProductsAssets.
    3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
    4. Use the filters to locate your NGFW or Prisma Access tenant.
    5. Expand the list of active licenses or click Licenses & Subscriptions.
    6. Verify that the AI Access Security license is active.
  16. Get Started with AI Access Security.

Activate the AI Access Security License (Existing Deployments)

Activate the AI Access Security for existing NGFW or Prisma Access users managed by either a Panorama™ management server or by Strata Cloud Manager.
This procedure assumes you only need to activate the AI Access Security license and that all prerequisite licenses are activate and have successfully set up your NGFW, Prisma Access, Panorama™ management server, and Strata Cloud Manager as needed.
  1. Click the magic link provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
  2. Click Activate Subscription to begin activating AI Access Security.
  3. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the magic link to activate AI Access Security.
    Create a New Account if the email address that received the AI Access Security activation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activating AI Access Security and assigned a Multitenant Superuser role.
  4. (Multitenancy only) In the Customer Support Account section, select the Palo Alto Networks Customer Support Account associated with the tenant for which you activating the AI Access Security license.
    Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
  5. (Multitenancy only) In the Allocate This Subscription section, select the tenant service group (TSG) for which you want to activate AI Access Security. You can select the parent tenant or a child tenant.
    AI Access Security is activated for only the selected tenant. If you select a parent tenant, AI Access Security isn't activated for any child tenant.
    Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
  6. Review the tenant Region. This region is pre-populated based on the deployed NGFW or Prisma Access tenant region and can't be changed.
  7. In the Assign Licenses section, click Done to assign all your AI Access Security licenses. Verify that the AI Access Security License is Fully Assigned
  8. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.
    Your Enterprise DLP instance is selected by default if active already on your tenant.
    Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.
  9. Agree to the Terms and Conditions.
  10. Activate.
    You're redirected to the Tenant Management page where the AI Access Security Activation Status starts Initializing.
    The AI Access Security license displays as Data Security and has a serial number that begins with AIX. Continue to the next step after the Activation Status is Complete.
  11. (NGFW only) Associate the AI Access Security license with your NGFW.
    Associating the AI Access Security license is required to activate the license for your NGFW.
    1. In the Strata Cloud Manager menu, select SettingsDevice Associations.
      The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
    2. Associate Apps.
    3. In the Licensed Products, select Data Security.
    4. Select the NGFW for which you want to activate AI Access Security.
    5. Save.
  12. Verify you successfully activated AI Access Security.
    1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
    2. Select ProductsAssets.
    3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
    4. Use the filters to locate your NGFW or Prisma Access tenant.
    5. Expand the list of active licenses or click Licenses & Subscriptions.
    6. Verify that the AI Access Security license is active.
  13. Get Started with AI Access Security.