Activate AIOps Premium
Table of Contents
Activate AIOps Premium
Learn about AIOps Premium activation.
| Where Can I Use This? | What Do I Need? |
|---|---|
Strata Cloud Manager provides unified management and
operations only for NGFWs using the AIOps for NGFW Premium license.
The AIOps for NGFW Premium (use the Strata Cloud Manager app) license is
supported only in a single tenant environment with paid Strata Logging Service. For information about support for firewalls and AIOps
for NGFW license type combinations, see Firewall and License Type Compatibility.
Strata Cloud Manager is now available, featuring two licensing tiers: Strata
Cloud Manager Essentials and Strata Cloud Manager Pro. This unified structure
streamlines the deployment of network security offerings, including AIOps for
NGFW, Autonomous Digital Experience Management (ADEM), cloud management
functionality, and Strata Logging Service. See Strata Cloud Manager License.
First time AIOps for NGFW Premium Activation - One Customer Support Portal Account
Learn how to activate your AIOps for NGFW Premium application for the
first time if you have only one Customer Support Portal account.
- After you receive an email from Palo Alto Networks identifying the AIOps for NGFW Premium license you're activating, click the email link to begin the activation process.Because you have only one Customer Support Portal account associated with your username, the Customer Support Account is prepopulated.Allocate the product to the Recipient.
- The name provided matches your Customer Support Portal account for convenience. You can use the name provided or change it.Select a Region where you want to deploy your product.The following are supported regions. If you first activate AIOps for NGFW Premium for Strata Cloud Manager in a region that isn't supported for Prisma Access, it's allowed because there are no dependencies with Prisma Access.However, if you later want to activate Prisma Access in the same region as the original AIOps for NGFW Premium region, it's not an available option. For hybrid customers, you will have to wait until the same region is supported by both AIOps for NGFW Premium and Prisma Access.Since Prisma Access (Managed by Strata Cloud Manager) is not yet supported in all regions, the following AIOps for NGFW Premium region will map to a different region when using Strata Cloud Manager to manage the firewall.Strata Cloud Manager Singapore is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager Germany is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager America is mapped to by the following AIOps for NGFW Premium region:Add Strata Logging Service.
![]()
- Select a Strata Logging Service instance for storing your logs.Enter the amount of data log storage.The region is grayed out, but is autopopulated with the same region that you used for Strata Logging Service.Select Cloud Identity Engine or create a new CIE instance to identify and verify all users across your infrastructure.
![]()
The web interface shows if you have Prisma Access and NGFW available in this tenant where you can apply AIOps for NGFW Premium.Agree to the terms and conditions, and Activate.A single default tenant is autocreated behind the scenes, and the product is activated in the tenant.This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.displays the status of the activation, such as initializing or complete.After the status is Complete, you must go to the tab to select the devices and add the firewall or Panorama appliance to your tenant. See Associate Devices with a Tenant.If the status isn't Complete, you can't add your devices yet.Launch Strata Cloud Manager with AIOps for NGFW Premium license from one of the following options.Get started with AIOps for NGFW.(Optional) Manage your product from Strata Cloud Manager.(Optional) Manage identity and access.First time AIOps for NGFW Premium Activation - Multiple Customer Support Portal Account
Learn how to activate your AIOps for NGFW Premium application for the first time if you have multiple Customer Support Portal accounts.- After you receive an email from Palo Alto Networks identifying the AIOps for NGFW Premium license you're activating, click the email link to begin the activation process.If you have multiple Customer Support Portal accounts, choose the Customer Support Account number that you want to use.
![]()
Allocate the product to the Recipient of your choice.You can allocate your entire license to one recipient or you can share it with multiple recipients in a tenant hierarchy. What is a tenant?- If you need just one tenant, use or rename the tenant provided. The name provided matches your Customer Support Portal account for convenience.
![]()
(Optional) This step applies if you are a managed security service provider (MSSP), a distributed enterprise customer, or need multiple tenants. After you create the first tenant, you can Allocate to subtenant and use or rename the tenant provided.![]()
A subscription gets allocated on a tenant or a sub-tenant. This step is for choosing a tenant where you want to allocate a license, not for building a complete tenant hierarchy. You can create only a tenant and subtenant here, and you can choose to allocate a license to that subtenant.After activation, you can build out your tenant hierarchy as needed through tenant management. You can create your tenant hierarchy to reflect your existing organizational structure. You can also consider identity and access inheritance when creating the hierarchy, in addition to tenant hierarchy limits.Select Done.Select a Region where you want to deploy your product.The following are supported regions. If you first activate AIOps for NGFW Premium for Strata Cloud Manager in a region that isn't supported for Prisma Access, it's allowed because there are no dependencies with Prisma Access.However, if you later want to activate Prisma Access in the same region as the original AIOps for NGFW Premium region, it's not an available option. For hybrid customers, you will have to wait until the same region is supported by both AIOps for NGFW Premium and Prisma Access.Since Prisma Access (Managed by Strata Cloud Manager) is not yet supported in all regions, the following AIOps for NGFW Premium region will map to a different region when using Strata Cloud Manager to manage the firewall.Strata Cloud Manager Singapore is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager Germany is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager America is mapped to by the following AIOps for NGFW Premium region:Add Strata Logging Service.![]()
- Select a Strata Logging Service instance.Enter the amount of data log storage.The region is grayed out, but is autopopulated with the same region that you used for Strata Logging Service.Select Cloud Identity Engine or create a new CIE instance to identify and verify all users across your infrastructure.
![]()
Agree to the terms and conditions, and Activate.This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.displays the status of the activation, such as initializing or complete.After the status is Complete, you must go to the tab to select the devices and add the firewall or Panorama appliance to your tenant. See Associate Devices with a Tenant.If the status isn't Complete, you can't add your devices yet.Launch Strata Cloud Manager with AIOps for NGFW Premium license from one of the following options.Get started with AIOps for NGFW.(Optional) Manage your product from Strata Cloud Manager.(Optional) Manage identity and access.Return Visit AIOPs Premium Activation
Learn how to activate your AIOPs Premium for repeat visits.Follow these steps if you have already completed first time activation, you have already created your tenant hierarchy through or tenant management, and you are returning to activate another product in your existing hierarchy.- Choose the Customer Support Account number that you want to use to activate.
![]()
Allocate the subscription to the Recipient tenant of your choice.You can hover over each tenant to see which apps you already activated.![]()
Select a Region for the physical location to process your data.The following are supported regions. If you first activate AIOps for NGFW Premium for Strata Cloud Manager in a region that isn't supported for Prisma Access, it's allowed because there are no dependencies with Prisma Access.However, if you later want to activate Prisma Access in the same region as the original AIOps for NGFW Premium region, it's not an available option. For hybrid customers, you will have to wait until the same region is supported by both AIOps for NGFW Premium and Prisma Access.Since Prisma Access (Managed by Strata Cloud Manager) is not yet supported in all regions, the following AIOps for NGFW Premium region will map to a different region when using Strata Cloud Manager to manage the firewall.Strata Cloud Manager Singapore is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager Germany is mapped to by the following AIOps for NGFW Premium region:Strata Cloud Manager America is mapped to by the following AIOps for NGFW Premium region:Add Strata Logging Service.![]()
- Select an Strata Logging Service instance.Enter the amount of data log storage.The region is grayed out, but is autopopulated with the same region that you used for Strata Logging Service.Select Cloud Identity Engine or create a new CIE instance to identify and verify all users across your infrastructure.
![]()
Agree to the terms and conditions, and Activate.This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.displays the status of the activation, such as initializing or complete.
