Create an AI Runtime Security Deployment Profile for Panorama

Table of Contents

Create an AI Runtime Security: Network intercept deployment profile in Customer Support Portal for Panorama support.

This page helps you to create a deployment profile in the Customer Support Portal for AI Runtime Security: Network intercept for Panorama support.

Before you begin, bring up your Panorama (Refer to Install the Panorama Virtual Appliance for bringing up Virtual Panorama).

Where Can I Use This?	What Do I Need?
Panorama managed AI Runtime Security	AI Runtime Security Licenses Activate Strata Logging Service

On this page, you will:

Create a deployment profile in the Customer Support Portal for Panorama support.
Associate the deployment profile with a tenant service group (TSG).
(Optional) If you have an existing Panorama, associate the Panorama to Hub.

Log in to the Palo Alto Networks Customer Support Portal.
Select Products Software/Cloud NGFW Credits.
Locate your credit pool and click Create Deployment Profile.
Select AI Runtime Security (Instance) and click Next.
Select PAN-OS 11.2.2 and above and click Next.
Enter the AI Runtime Security details including Profile Name, Number of AI runtime security instances, and Planned vCPU per instance. (Review the AI Runtime Security Setup Prerequisites and Limitations page).
Enable Panorama for Management (with Log Collector) to manage the firewall by Panorama. (Strata Cloud Manager is auto-selected by default).
Create Deployment Profile.

After creating your deployment profile, associate the deployment profile with a TSG.

Log in to Palo Alto Networks Customer Support Portal.
Select Products Software/Cloud NGFW Credits.
Locate the credit pool you used to create the deployment profile and click Details.
Locate your AI Runtime Security deployment profile for Panorama and click Finish Setup (Record the AUTH CODE).

You're redirected to Hub to Activate Subscriptions based on Deployment Profile(s) and associate the deployment profile with a TSG.
Select the customer support account used to create your deployment profile from the Customer Support Account drop-down.
Select the tenant where you want the product to be activated.

Verify that the Strata Logging Service is enabled for this tenant.
Select the Region.
Select the deployment profile you created previously.

If you have any existing deployment profiles associated with your tenant, don't uncheck them. Doing so will disassociate them from the tenant.
Select a Data Loss Prevention (DLP) instance. If you don't have one, select Create New.
Enter a Description.
Agree to the Terms and Conditions.
Click Activate and record the Auth Code.
To verify the successful TSG association, log in to Hub, select Common Services → Tenant Management and then select your tenant. (Panorama may take around 30 minutes to connect to the TSG).
The deployment profile for Panorama support includes the following subscriptions:

Log in to Hub.
Navigate to Common Services → Device Associations.
Select your tenant and click Add Devices.
Select the devices and Save.
Verify that your device is listed under the Device Associations tab.

This step ensures that Panorama is recognized as a management device for your AI Runtime Security: Network intercept.
Next, onboard a cloud account in Strata Cloud Manager for cloud assets discovery.