AI Access Security
Activate the AI Access Security License
Table of Contents
Expand All
|
Collapse All
AI Access Security Docs
Activate the AI Access Security License
AI Access Security
LicenseActivate the
AI Access Security
for new and existing users.Where Can I Use This? | What Do I Need? |
---|---|
| One of the following:
|
Activate your
AI Access Security
license to enable your organization to safely adopt
generative AI (GenAI) applications by your employees. AI Access Security
activation is performed using a magic link provided by Palo Alto Networks
after
purchase of the AI Access Security
license. These procedures assume you
already have all the required license auth codes and magic links required for
activation. After you purchase your
AI Access Security
license, you must activate the
license using a magic link sent to you by Palo Alto Networks
. AI Access Security
is included when you activate a CASB-PA or CASB-X
license. No further action is required to activate the
AI Access Security
after you activate a CASB-PA or CASB-X
license.Activate the AI Access Security License (New Deployments)
AI Access Security
License (New Deployments)Activate the
AI Access Security
for a new NGFW (Managed by Panorama)
or NGFW (Managed by Strata Cloud Manager)
user.- Install and perform the initial configuration for your NGFW.This includes activating all the required support licenses.
- Set up management for yourNGFWorPrisma Accesstenant.
- NGFW (Managed by Panorama)
- Set upPanorama.
- —Install thePanoramaVirtual AppliancePanoramavirtual appliance on your preferred hypervisor in Management Only or Panorama mode
- DeployStrata Logging Service.
- RegisterPanorama.
- Activate thePanoramasupport license.
- Add your managed firewalls toPanoramamanagement.
- NGFW (Managed by Strata Cloud Manager)
- Activate theAIOps for NGFW Premiumlicense.
- DeployStrata Logging Service.
- Install the latest dynamic content updates and upgrade yourNGFWto the minimum PAN-OS version supported forAI Access Security.
- Prisma Access (Managed by Panorama)
- Set upEnterprise Data Loss Prevention (E-DLP).
- Click the magic link provided to you byPalo Alto Networkswhen you purchase theAI Access Securitysubscription.
- ClickActivate Subscriptionto begin activatingAI Access Security.
- Enter yourPalo Alto NetworksCustomer Support Portal (CSP)Email Address. This email address must match the email address that received the magic link to activateAI Access Security.Create a New Accountif the email address that received theAI Access Securityactivation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activatingAI Access Securityand assigned a Multitenant Superuser role.
- (Multitenancy only) In theCustomer Support Accountsection, select thePalo Alto NetworksCustomer Support Account associated with the tenant for which you activating theAI Access Securitylicense.Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
- (Multitenancy only) In theAllocate This Subscriptionsection, select the tenant service group (TSG) for which you want to activateAI Access Security. You can select the parent tenant or a child tenant.AI Access Securityis activated for only the selected tenant. If you select a parent tenant,AI Access Securityisn't activated for any child tenant.Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
- Review the tenantRegion. This region is pre-populated based on the deployedNGFWorPrisma Accesstenant region and can't be changed.
- In theAssign Licensessection, clickDoneto assign all yourAI Access Securitylicenses. Verify that yourAI Access Security LicenseisFully Assigned
- Verify that yourData Loss Preventioninstance is selected if you haveEnterprise Data Loss Prevention (E-DLP)active on your tenant.YourEnterprise DLPinstance is selected by default if active already on your tenant.Skip this step if you don't haveEnterprise DLPalready active.Enterprise DLPis not required to enableAI Access Security. IfEnterprise DLPinstance is not already active then one is created as part of the license activation. Review what happens toEnterprise DLPif you don't renew yourAI Access Securitylicense.
- Agree to the Terms and Conditions.
- Activate.You're redirected to the Tenant Management page where theAI Access SecurityActivation StatusstartsInitializing.TheAI Access Securitylicense displays asData Securityand has a serial number that begins withAIX. Continue to the next step after theActivation StatusisComplete.
- (NGFW only) Associate theAI Access Securitylicense with yourNGFW.Associating theAI Access Securitylicense is required to activate the license for yourNGFW.
- In theStrata Cloud Managermenu, select.SettingsDevice AssociationsTheStrata Cloud Managermenu is located in the bottom-left corner ofStrata Cloud Manager.
- Associate Apps.
- In the Licensed Products, selectData Security.
- Select theNGFWfor which you want to activateAI Access Security.
- Save.
- Verify you successfully activatedAI Access Security.
- Log in to thePalo Alto NetworksCustomer Support Portal (CSP).
- Select.ProductsAssets
- SelectorNGFWtenant based on the enforcement point for which you activatedPrisma AccessAI Access Security.
- Use the filters to locate yourNGFWorPrisma Accesstenant.
- Expand the list of active licenses or clickLicenses & Subscriptions.
- Verify that theAI Access Securitylicense is active.
- Get Started withAI Access Security.
Activate the AI Access Security License (Existing Deployments)
AI Access Security
License (Existing Deployments)Activate the
AI Access Security
for existing NGFW
or Prisma Access
users managed by either a Panorama™ management server
or by Strata Cloud Manager
.This procedure assumes you only need to activate the
AI Access Security
license and that all prerequisite licenses are activate and have successfully set up
your NGFW
, Prisma Access
, Panorama™ management server
, and Strata Cloud Manager
as needed.- Click the magic link provided to you byPalo Alto Networkswhen you purchase theAI Access Securitysubscription.
- ClickActivate Subscriptionto begin activatingAI Access Security.
- Enter yourPalo Alto NetworksCustomer Support Portal (CSP)Email Address. This email address must match the email address that received the magic link to activateAI Access Security.Create a New Accountif the email address that received theAI Access Securityactivation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activatingAI Access Securityand assigned a Multitenant Superuser role.
- (Multitenancy only) In theCustomer Support Accountsection, select thePalo Alto NetworksCustomer Support Account associated with the tenant for which you activating theAI Access Securitylicense.Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
- (Multitenancy only) In theAllocate This Subscriptionsection, select the tenant service group (TSG) for which you want to activateAI Access Security. You can select the parent tenant or a child tenant.AI Access Securityis activated for only the selected tenant. If you select a parent tenant,AI Access Securityisn't activated for any child tenant.Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
- Review the tenantRegion. This region is pre-populated based on the deployedNGFWorPrisma Accesstenant region and can't be changed.
- In theAssign Licensessection, clickDoneto assign all yourAI Access Securitylicenses. Verify that theAI Access Security LicenseisFully Assigned
- Verify that yourData Loss Preventioninstance is selected if you haveEnterprise Data Loss Prevention (E-DLP)active on your tenant.YourEnterprise DLPinstance is selected by default if active already on your tenant.Skip this step if you don't haveEnterprise DLPalready active.Enterprise DLPis not required to enableAI Access Security. IfEnterprise DLPinstance is not already active then one is created as part of the license activation. Review what happens toEnterprise DLPif you don't renew yourAI Access Securitylicense.
- Agree to the Terms and Conditions.
- Activate.You're redirected to the Tenant Management page where theAI Access SecurityActivation StatusstartsInitializing.TheAI Access Securitylicense displays asData Securityand has a serial number that begins withAIX. Continue to the next step after theActivation StatusisComplete.
- (NGFW only) Associate theAI Access Securitylicense with yourNGFW.Associating theAI Access Securitylicense is required to activate the license for yourNGFW.
- In theStrata Cloud Managermenu, select.SettingsDevice AssociationsTheStrata Cloud Managermenu is located in the bottom-left corner ofStrata Cloud Manager.
- Associate Apps.
- In the Licensed Products, selectData Security.
- Select theNGFWfor which you want to activateAI Access Security.
- Save.
- Verify you successfully activatedAI Access Security.
- Log in to thePalo Alto NetworksCustomer Support Portal (CSP).
- Select.ProductsAssets
- SelectorNGFWtenant based on the enforcement point for which you activatedPrisma AccessAI Access Security.
- Use the filters to locate yourNGFWorPrisma Accesstenant.
- Expand the list of active licenses or clickLicenses & Subscriptions.
- Verify that theAI Access Securitylicense is active.
- Get Started withAI Access Security.