Activate the AI Access Security License (New Deployments)

1. Install and perform the initial configuration for your NGFW.

   This includes activating all the required support licenses.
2. Set up management for your NGFW or Prisma Access tenant.

   • NGFW (Managed by Panorama)
     1. Set up Panorama.

        • M-Series Appliance—Set up the M-Series appliance in Management Only or Panorama mode.
        • Panorama Virtual Appliance—Install the Panorama virtual appliance on your preferred hypervisor in Management Only or Panorama mode
     2. Deploy Strata Logging Service.
     3. Register Panorama.
     4. Activate the Panorama support license.
     5. Activate the Panorama device management license (M-Series Appliance or Panorama Virtual Appliance).
     6. Add your managed firewalls to Panorama management.
     7. Upgrade Panorama to the minimum PAN-OS version supported for AI Access Security.
     8. Upgrade your NGFW to the minimum PAN-OS version supported for AI Access Security.
   • NGFW (Managed by Strata Cloud Manager)
     1. Deploy Strata Logging Service.
        Strata Cloud Manager requires Strata Logging Service for logging.
     2. Activate the Strata Cloud Manager Essentials or Strata Cloud Manager Pro license.
     3. Onboard your NGFW to Strata Cloud Manager.
     4. Install the latest dynamic content updates and upgrade your NGFW to the minimum PAN-OS version supported for AI Access Security.
   • Prisma Access (Managed by Panorama)
     1. Set up Panorama.

        • M-Series Appliance—Set up the M-Series appliance in Management Only or Panorama mode.
        • Panorama Virtual Appliance—Install the Panorama virtual appliance on your preferred hypervisor in Management Only or Panorama mode
     2. Deploy Strata Logging Service.
     3. Register Panorama.
     4. Activate the Panorama support license.
     5. Activate the Panorama device management license (M-Series Appliance or Panorama Virtual Appliance).
     6. Upgrade Panorama to the minimum PAN-OS version supported for AI Access Security.
     7. Install the Cloud Services plugin on Panorama.
     8. Set up Panorama Managed Prisma Access.
   • Prisma Access (Managed by Strata Cloud Manager)
     1. Deploy Strata Logging Service.
        Strata Cloud Manager requires Strata Logging Service for logging.
     2. Activate the Prisma Access license on Strata Cloud Manager.
     3. Set up Prisma Access.
3. Set up Enterprise Data Loss Prevention (E-DLP).

   • NGFW (Managed by Panorama)
     1. Install the Enterprise DLP plugin on Panorama.
     2. Enable Enterprise DLP for NGFW.
     3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
   • NGFW (Managed by Strata Cloud Manager)
     1. Enable Enterprise DLP for NGFW.
     2. Edit the Enterprise DLP data filtering and snippet settings as needed.
   • Prisma Access (Managed by Panorama)
     1. Install the Enterprise DLP plugin on Panorama.
     2. Enable Enterprise DLP for Prisma Access.
     3. Edit the Enterprise DLP cloud content, data filtering, and snippet settings as needed.
   • Prisma Access (Managed by Strata Cloud Manager)
     1. Enable Enterprise DLP for NGFW.
     2. Edit the Enterprise DLP data filtering and snippet settings as needed.
4. Click the Login to Activate link in the email provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.

5. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the link to activate AI Access Security.
6. In the Manage Subscriptions page, choose the product you want to activate and Activate.

7. On the activation page, specify the tenant, region and Activate Now to begin activating AI Access Security.

8. You can either View Details of the subscription or Launch your AI Access Security instance.

9. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.

   Your Enterprise DLP instance is selected by default if active already on your tenant.

   Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.

10. (NGFW only) Associate the AI Access Security license with your NGFW.

    Associating the AI Access Security license is required to activate the license for your NGFW.

    1. In the Strata Cloud Manager menu, select System SettingsDevice Associations.

       The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
    2. Associate Apps.
    3. In the Licensed Products, select Data Security.
    4. Select the NGFW for which you want to activate AI Access Security.
    5. Save.
11. Verify you successfully activated AI Access Security.

    1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
    2. Select ProductsAssets.
    3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
    4. Use the filters to locate your NGFW or Prisma Access tenant.
    5. Expand the list of active licenses or click Licenses & Subscriptions.
    6. Verify that the AI Access Security license is active.

12. Get Started with AI Access Security.