Create an AI Runtime Security Deployment Profile for Panorama

Table of Contents

Panorama Managed AI Runtime Security: Network Intercept Overview

Panorama Managed AI Runtime Security Onboarding Prerequisites

Create an AI Runtime Security: Network intercept deployment profile in Customer Support Portal for Panorama support.

This page helps you to create a deployment profile in the Customer Support Portal for AI Runtime Security: Network intercept for Panorama support.

Before you begin, bring up your Panorama (Refer to Install the Panorama Virtual Appliance to bring up virtual Panorama).

You can deploy the Panorama™ management server as a virtual appliance or a hardware appliance (M-Series appliance). For a Panorama virtual appliance, you can:

Add a firewall as a managed device and the serial number for the server on each firewall.
Or, enable Panorama for Management (with Log Collector) in the deployment profile in the Customer Support Portal. This automatically generates a serial number that you can use to associate the deployment profile with the Hub.

Where Can I Use This?	What Do I Need?
Panorama managed AI Runtime Security	AI Runtime Security Licenses Activate Strata Logging Service

On this page, you will:

Create a deployment profile in the Customer Support Portal for Panorama support.
Associate the deployment profile with a tenant service group (TSG).
Provision Panorama

Log in to the Palo Alto Networks Customer Support Portal.
Select Products Software/Cloud NGFW Credits.
Locate your credit pool and click Create Deployment Profile.
Select AI Runtime Security (Instance) and click Next.
Select PAN-OS 11.2.2 and above and click Next.
Enter the AI Runtime Security details including Profile Name, Number of AI runtime security instances, and Planned vCPU per instance. (Review the AI Runtime Security Setup Prerequisites and Limitations page).
Enable Panorama for Management (with Log Collector) to manage the firewall by Panorama. (Strata Cloud Manager is auto-selected by default).
Create Deployment Profile.

Associate a Deployment Profile to a Tenant Service Group (TSG)

After creating your deployment profile, associate the deployment profile with a TSG.

Log in to Palo Alto Networks Customer Support Portal.
Select Products Software/Cloud NGFW Credits.
Locate the credit pool you used to create the deployment profile and click Details.
Locate your AI Runtime Security deployment profile for Panorama and click Finish Setup (Record the AUTH CODE).

You're redirected to Hub to Activate Subscriptions based on Deployment Profile(s) and associate the deployment profile with a TSG.
Select the customer support account used to create your deployment profile from the Customer Support Account drop-down.
Select the tenant where you want the product to be activated.

Verify that the Strata Logging Service is enabled for this tenant.
Select the Region.
Select the deployment profile you created previously.

If you have any existing deployment profiles associated with your tenant, don't uncheck them. Doing so will disassociate them from the tenant.
Select a Data Loss Prevention (DLP) instance. If you don't have one, select Create New.
Enter a Description.
Agree to the Terms and Conditions.
Click Activate and record the Auth Code.
To verify the successful TSG association, log in to Hub, select Common Services → Tenant Management and then select your tenant.
The deployment profile for Panorama support includes the following subscriptions:
Automatically associate a deployment profile with the Hub:
- Provision Panorama, this will generate a serial number and auto-registers the Panorama as an asset.
- When you bring up Panorama; add this serial number to Panorama (Panorama > Setup > Management > General Settings).
Panorama may take up to 2 hours to push the AI security profiles to the AI core service.