Enable Strata Logging Service (SLS) for existing Panorama-managed firewalls
Focus
Focus
Cloud NGFW for Azure

Enable Strata Logging Service (SLS) for existing Panorama-managed firewalls

Table of Contents

Enable Strata Logging Service (SLS) for existing Panorama-managed firewalls

You can now seamlessly enable Strata Logging Service (SLS) for existing Panorama-managed firewalls without requiring intervention from Palo Alto Networks support.
Where Can I Use This?What Do I Need?
  • Cloud NGFW for Azure
  • Cloud NGFW subscription
  • Palo Alto Networks Customer Support Portal account
  • Azure Marketplace subscription
You can now seamlessly enable Strata Logging Service (SLS) for existing Panorama-managed firewalls without requiring intervention from Palo Alto Networks support.
As a prerequisite for using the SLS feature with CNGFW, Panorama must first be added to the SCM/HUB. For more information, see Associate device with a tenant.
Prerequisites:
Following are the prerequisites for SLS integration with Panorama-managed firewalls, as these will result in degraded statuses and messages if not met.
  • Panorama Plugin for Azure version 5.2.4 and later.
  • The Azure Service and Panorama must be located within the same Cloud Service Provider (CSP).
  • Panorama and SLS must be associated with the same Tenant Service Group (TSG).
  • When creating a firewall, a PIN/VALUE must be generated from the CSP where Panorama is, and this must be used in the registration string.
  • The TSG must have SCM Essentials or SCM Pro enabled. If not currently present on your TSG, follow the Activate Strata Cloud Manager Essentials guide to activate the free app.
To handle these changes, do the following:
  • Get the Panorama device serial number (This should be the same Panorama through which Cloud NGFW Firewall is managed)
  • Add Panorama device serial number to the Tenant Service Group (TSG) where Strata Logging Service (SLS) is enabled. For more information, see Associate Devices with a Tenant.
  • Once the above is complete, generate a new configuration string. For more information, see Panorama Policy Management.
  • Update the firewall in Azure portal with the new configuration.
For more information see Monitor Cloud NGFW Health.