Activate the AI Access Security License (New Deployments)

1. Install and perform the initial configuration for your NGFW.

   This includes activating all the required support licenses.
2. Set up management for your NGFW or Prisma Access tenant.

   • NGFW (Managed by Panorama)
     1. Set up Panorama.

        • M-Series Appliance—Set up the M-Series appliance in Management Only or Panorama mode.
        • Panorama Virtual Appliance—Install the Panorama virtual appliance on your preferred hypervisor in Management Only or Panorama mode
     2. Deploy Strata Logging Service.
     3. Register Panorama.
     4. Activate the Panorama support license.
     5. Activate the Panorama device management license (M-Series Appliance or Panorama Virtual Appliance).
     6. Add your managed firewalls to Panorama management.
     7. Upgrade Panorama to the minimum PAN-OS version supported for AI Access Security.
     8. Upgrade your NGFW to the minimum PAN-OS version supported for AI Access Security.
   • NGFW (Managed by Strata Cloud Manager)
     1. Activate the AIOps for NGFW Premium license.
     2. Deploy Strata Logging Service.
     3. Onboard your NGFW to Strata Cloud Manager.
     4. Install the latest dynamic content updates and upgrade your NGFW to the minimum PAN-OS version supported for AI Access Security.
   • Prisma Access (Managed by Panorama)
     1. Set up Panorama.

        • M-Series Appliance—Set up the M-Series appliance in Management Only or Panorama mode.
        • Panorama Virtual Appliance—Install the Panorama virtual appliance on your preferred hypervisor in Management Only or Panorama mode
     2. Deploy Strata Logging Service.
     3. Register Panorama.
     4. Activate the Panorama support license.
     5. Activate the Panorama device management license (M-Series Appliance or Panorama Virtual Appliance).
     6. Upgrade Panorama to the minimum PAN-OS version supported for AI Access Security.
     7. Install the Cloud Services plugin on Panorama.
     8. Set up Panorama Managed Prisma Access.
   • Prisma Access (Managed by Strata Cloud Manager)
     1. Activate the Prisma Access license on Strata Cloud Manager.
     2. Deploy Strata Logging Service.
     3. Set up Prisma Access.
3. Set up Enterprise Data Loss Prevention (E-DLP).

   • NGFW (Managed by Panorama)
     1. Install the Enterprise DLP plugin on Panorama.
     2. Enable Enterprise DLP for NGFW.
     3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
   • NGFW (Managed by Strata Cloud Manager)
     1. Enable Enterprise DLP for NGFW.
     2. Edit the Enterprise DLP data filtering and snippet settings as needed.
   • Prisma Access (Managed by Panorama)
     1. Install the Enterprise DLP plugin on Panorama.
     2. Enable Enterprise DLP for Prisma Access.
     3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
   • Prisma Access (Managed by Strata Cloud Manager)
     1. Enable Enterprise DLP for NGFW.
     2. Edit the Enterprise DLP data filtering and snippet settings as needed.
4. Click the magic link provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
5. Click Activate Subscription to begin activating AI Access Security.
6. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the magic link to activate AI Access Security.

   Create a New Account if the email address that received the AI Access Security activation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activating AI Access Security and assigned a Multitenant Superuser role.

7. (Multitenancy only) In the Customer Support Account section, select the Palo Alto Networks Customer Support Account associated with the tenant for which you activating the AI Access Security license.

   Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
8. (Multitenancy only) In the Allocate This Subscription section, select the tenant service group (TSG) for which you want to activate AI Access Security. You can select the parent tenant or a child tenant.

   AI Access Security is activated for only the selected tenant. If you select a parent tenant, AI Access Security isn't activated for any child tenant.

   Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
9. Review the tenant Region. This region is pre-populated based on the deployed NGFW or Prisma Access tenant region and can't be changed.

10. In the Assign Licenses section, click Done to assign all your AI Access Security licenses. Verify that your AI Access Security License is Fully Assigned
11. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.

    Your Enterprise DLP instance is selected by default if active already on your tenant.

    Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.

12. Agree to the Terms and Conditions.
13. Activate.

    You're redirected to the Tenant Management page where the AI Access Security Activation Status starts Initializing.

    The AI Access Security license displays as Data Security and has a serial number that begins with AIX. Continue to the next step after the Activation Status is Complete.

14. (NGFW only) Associate the AI Access Security license with your NGFW.

    Associating the AI Access Security license is required to activate the license for your NGFW.

    1. In the Strata Cloud Manager menu, select SettingsDevice Associations.

       The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
    2. Associate Apps.
    3. In the Licensed Products, select Data Security.
    4. Select the NGFW for which you want to activate AI Access Security.
    5. Save.
15. Verify you successfully activated AI Access Security.

    1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
    2. Select ProductsAssets.
    3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
    4. Use the filters to locate your NGFW or Prisma Access tenant.
    5. Expand the list of active licenses or click Licenses & Subscriptions.
    6. Verify that the AI Access Security license is active.

16. Get Started with AI Access Security.