VM-Series (Software NGFW Credits)

1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
2. Select ProductsSoftware NGFW CreditsCreate Deployment Profile.

   If you want to add Advanced IP Defense to an existing deployment profile instead, select Manage Deployment Profiles, locate the profile, and choose Edit.
3. Choose VM-Series as the firewall type and click Next.
4. Choose Flexible vCPUs and select PAN-OS 12.2 or later as the version, then click Next.

   Advanced IP Defense requires PAN-OS 12.2 or later. If you select an earlier version, Advanced IP Defense does not appear in the subscription list.
5. Configure the deployment profile settings.

   Enter the following:

   • Profile Name — A descriptive name for the profile.
   • Number of Firewalls — The number of VM-Series firewalls this profile deploys. Credits are deducted only when you deploy a firewall.
   • Planned vCPU/Firewall — The number of vCPUs per firewall.
6. In Customize Subscriptions, select Advanced IP Defense.

   The subscription list shows all available security services. Select Advanced IP Defense to include it in this deployment profile. You can also select other subscriptions (such as Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, or Advanced DNS Security) based on your security requirements.
7. Calculate Estimated Cost to review the credit total.

   Verify that your credit pool has sufficient credits to cover the Advanced IP Defense subscription along with your other selected services.
8. Create Deployment Profile.

   The CSP generates a deployment auth code (starts with "D") that includes your Advanced IP Defense entitlement. Note this auth code for use when you register your VM-Series firewalls.
9. Register and deploy your VM-Series firewalls using the deployment profile auth code.

   When you bootstrap or register a VM-Series firewall with this auth code, the firewall automatically retrieves all subscriptions included in the deployment profile, including Advanced IP Defense. For the full registration and deployment workflow, see Activate the Deployment Profile.
10. Install the latest content update on the VM-Series firewall.

    The content update delivers the Advanced IP Defense IP attribute category definitions and the default security profile. Select DeviceDynamic Updates and choose Check Now, then install the latest Applications and Threats update.