Enable Strata Logging Service (SLS) for existing Panorama-managed firewalls
You can now seamlessly enable Strata Logging Service (SLS) for existing
Panorama-managed firewalls without requiring intervention from Palo Alto Networks
support.
Where Can I Use This? | What Do I Need? |
|
- Cloud NGFW subscription
- Palo Alto Networks Customer Support Portal account
- Azure Marketplace subscription
|
You can now seamlessly enable Strata Logging Service (SLS) for existing
Panorama-managed firewalls without requiring intervention from Palo Alto Networks
support.
As a prerequisite for using the
SLS feature with CNGFW, Panorama must
first be added to the SCM/HUB. For more information, see
Associate device with a tenant.
To handle these changes, do the following:
Prerequisites:
Following are the prerequisites for SLS integration with Panorama-managed
firewalls, as these will result in degraded statuses and messages if not met.
Panorama Plugin for Azure version 5.2.2 and above.
The Azure Service and Panorama must be located within the same Cloud
Service Provider (CSP).
Panorama and SLS must be associated with the same Tenant Service Group
(TSG).
When creating a firewall, a PIN/VALUE must be generated from the CSP
where Panorama is, and this must be used in the registration string.