Link the Cloud NGFW to Palo Alto Networks Management

Select

Integrations

.



In the

Policy Management

section, click

Edit

.

The

Edit Policy Management

screen displays Panorama serial numbers to integrate with your Cloud NGFW resource. This screen displays two different icons describing the state of the Panorama license; a Panorama linked to CDL, and a Panorama that is not linked to CDL. The image below illustrates these icons:



In the

Edit Policy Management

screen, select the

Primary Panorama Serial Number

from the drop-down menu. For HA environments, select the

Secondary Panorama Serial Number

from the drop-down menu.



If you select a Panorama serial number that is not linked to CDL, you must specify an option to either cancel the linking process, in which case you agree to procure a CDL license and associate it with your Panorama appliance, or, you agree to continue using Panorama for policy management only:



If you select a Panorama license that is already connected to a CDL, you are asked to

Confirm

the association before continuing with the integration process:



After selecting the Panorama license, click

Continue

.

The Cloud NGFW tenant automatically pulls the CDL information from Panorama. If you do not plan to use CDL for logging, you can send logs to AWS. For more information, see Configure Logging for Cloud NGFW on AWS.

The Integrations page displays the serial numbers and CDL ID: