NGFW and Panorama

1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
2. Select ProductsAssets.
3. Locate the enforcement point you want to license and click the Licenses & Subscriptions icon in the Actions column.

4. On the Licenses & Subscriptions tab, click Activate License.
5. Select an activation type and complete the activation.

   • Activate License—Enter the auth code from your Advanced IP Defense order in the Activate Auth-Code field and click Agree and Submit.
   • Activate Trial License—Select Advanced IP Defense from the list of available trial licenses to activate a 90-day trial without an auth code.

6. Verify that Advanced IP Defense appears in the Cloud Delivered Security Services table on the Licenses & Subscriptions tab.

7. Retrieve the license on the enforcement point.

   For enforcement points managed by PAN-OS directly, select DeviceLicenses and choose Retrieve license keys from license server.

   For enforcement points managed by Strata Cloud Manager, Strata Cloud Manager retrieves the license automatically after you activate it in the CSP and the next synchronization cycle completes.

   For enforcement points managed by Panorama, push the license retrieval from PanoramaDevice DeploymentLicenses.
8. Install the latest content update on the enforcement point.

   The content update delivers the Advanced IP Defense IP attribute category definitions and the default Advanced IP Defense security profile. Without the latest content, you cannot access the Advanced IP Defense configuration options or the default profile.

   For enforcement points managed by PAN-OS directly, select DeviceDynamic Updates and choose Check Now, then install the latest Applications and Threats update.
9. Configure and deploy Advanced IP Defense on your enforcement points.

   After activating the license and installing the latest content update, you can create or assign an Advanced IP Defense security profile and attach it to one or more enforcement point zones.