: Activate a Next-Generation CASB License on Cross Platforms (CASB-X) Through Common Services
Focus
Focus

Activate a Next-Generation CASB License on Cross Platforms (CASB-X) Through Common Services

Table of Contents

Activate a Next-Generation CASB License on Cross Platforms (CASB-X) Through
Common Services

Learn how to add a cloud access security broker (CASB-X) license to an existing Cloud Managed
Prisma Access
tenant or Panorama managed firewall through
Common Services
.
Where Can I Use This?
What Do I Need?
  • Commercial deployments
  • Prisma Access
    • Prisma Access (Managed by Strata Cloud Manager)
      : 3.2 Innovation Release (Future: Prisma Access 4.0 Preferred Release)
    • Prisma Access (Managed by Panorama)
      : 10.2 or newer
  • Next-Generation Firewall (Hardware Only and not available on VMs)
    • PAN-OS or Panorama management
    • PAN-OS 10.2.3 or newer
  • License activation link for your product.
  • Cortex Data Lake
    is required for SaaS Security Inline. CASB-X can be activated without it.
  • SSL decryption must be enabled on NGFW and Access (this requires a separate professional services quickstart if not already enabled).
  • Role: Multitenant superuser or superuser with access to the Customer Support Portal.
The next-generation cloud access security broker (CASB-X) license contains all the CASB components such as SaaS Security Inline, SaaS Security API, SaaS Security Posture Management (SSPM), and Enterprise DLP. It can be applied on Cloud Managed
Prisma Access
, Panorama Managed
Prisma Access
, and Panorama managed Next-Generation Firewall (NGFW) devices in a single tenant environment.
If you are trying to activate the CASB on
Prisma Access
add-on bundle, Activate a License for Cloud-managed
Prisma Access
and Add-ons instead. CASB-X is only supported in a single tenant environment, but the CASB add-on bundle is supported in single and multitenant environments.
If you have
Prisma Access
or NGFW in your tenant, you can apply CASB-X to the
Prisma Access
or NGFW devices in that same tenant.
You cannot activate CASB-X if you already have the CASB add-on bundle, or the add-ons associated with the bundle, activated on your tenant. You cannot activate CASB-X if you do not have
Cortex Data Lake
activated on your tenant.
To convert a trial
SaaS Security
license to a production license, see convert trial license to production
After you receive an email from Palo Alto Networks identifying the next-generation CASB-X license you are activating, click the email link to begin the activation process.
Select
Get Started with NGCASB-X
in your email and then complete the following tasks.
  1. You are automatically directed to
    Common Services
    Subscription & Add-ons
    , where you
    Activate
    the subscription for your product.
  2. Select the same
    Tenant
    that you used for the
    Prisma Access
    license or the
    Cortex Data Lake
    license, so that you can associate the NGFW on the same tenant where you want CASB-X to be applied.
  3. The
    Customer Support Account
    is grayed out, but is autopopulated with the same Customer Support Portal account that you used for the
    Prisma Access
    license or the
    Cortex Data Lake
    license.
  4. The
    Region
    is grayed out, but is autopopulated with the same region that you used for the
    Prisma Access
    license or the
    Cortex Data Lake
    license.
  5. The web interface shows if you have
    Prisma Access
    and NGFW available in this tenant where you can apply CASB-X.
  6. Agree
    to the terms and conditions.
  7. Activate Now
    .
  8. CASB-X activation is now complete for
    Prisma Access
    . To apply CASB-X on NGFW, you must go to the Device Association tab to select the devices and apply Next-Generation CASB on them:

Recommended For You