How to Activate AIOps for NGFW
Focus
Focus
Next-Generation Firewall

Activate AIOps for NGFW

Table of Contents

How to Activate AIOps for NGFW

Learn about how to activate AIOps for NGFW.
This content is for the cloud management of Next-Generation Firewalls with
AIOps for NGFW
and
Strata Cloud Manager
. To get started managing Next-Generation Firewalls with
PAN-OS
, click here.
Where Can I Use This?
What Do I Need?
  • NGFW (Cloud Managed)
  • NGFW (PAN-OS or Panorama Managed)
  • VM-Series, funded with Software NGFW Credits
  • AIOps for NGFW Free (use the AIOps for NGFW Free app)
    or
  • AIOps for NGFW Premium license (use the Strata Cloud Manager app)
FedRAMP accounts cannot use
AIOps for NGFW
. To check if this applies to you, sign in to your Customer Support Portal account and select
Account Management
Account Details
. If you see
FedRamp Account
listed, then you cannot use
AIOps for NGFW
.
Here are the different scenarios for activating
AIOps for NGFW
:
Scenario
Plan
Activating
AIOps for NGFW
Free
Activating
AIOps for NGFW
Premium (use Strata Cloud Manager app)
Onboarding new devices to the activated
AIOps for NGFW
Free instance
Onboarding new devices to the activated
AIOps for NGFW
Premium (use Strata Cloud Manager app)
Strata Cloud Manager provides unified management and operations only for NGFWs using the AIOps for NGFW Premium license. The application tile name on the hub for AIOps for NGFW (the premium app only) is now changed to Strata Cloud Manager. With this update, the application URL has also changed to stratacloudmanager.paloaltonetworks.com, and you’ll also now see the Strata Cloud Manager logo on the left navigation pane. Continue to use the AIOps for NGFW Free app for the NGFWs onboarded to AIOps for NGFW Free.
Additionally,
AIOps for NGFW
supports the following licenses:

Activate
AIOps for NGFW
(Free)

Activation requires the Account Administrator or App Administrator role.
  1. Log in to the hub with the tenant-centric view.
    Toggle
    View by Support Account
    off if you are in the Support Account view.
    If you don't have an existing tenant, log in to the hub with the support account view.
  2. Find
    AIOps for NGFW
    and select
    Activate
    .
  3. Complete the form.
    Tenant
    Select the tenant where the AIOps for NGFW instance will be activated. If you don’t have an existing tenant, select
    Create New
    .
    Customer Support Account
    Your Customer Support Portal account ID.
    Region
    The deployment region and the region where your data logs are stored. See Regions for AIOps for NGFW.
    Cortex Data Lake
    The
    Cortex Data Lake
    from which you want to send data to AIOps for NGFW. If you have a logging CDL, you can associate it with AIOps for NGFW. Otherwise, you can skip it.
    If AIOps for NGFW is the first application being activated for the selected tenant, then you need to populate these fields. Otherwise, they will be auto populated.
  4. Agree to the Terms and Conditions
    and
    Activate
    .
  5. AIOps for NGFW is ready after
    Status
    shows
    Complete
    .
  6. Associate devices to a tenant containing your AIOps for NGFW instance.
    You need to associate Panorama to the tenant containing AIOps for NGFW if you are onboarding Panorama-managed deployments. Make sure to individually associate all the firewalls managed by Panorama as well.
    The devices that you associated with the tenant will be automatically added to AIOps for NGFW.
    • For AIOps for NGFW Free activation, associating apps with devices is not required.
    • You can associate devices to a tenant at the beginning of activation if you already have an existing tenant.
    • You can remove device associations if, for example, you are retiring or returning a firewall or Panorama appliance, or if you want to associate it with another tenant service group (TSG).
  7. Log in to AIOps for NGFW by clicking on its icon in the hub.

Recommended For You