: Device Certificate for a Palo Alto Networks Cloud Service
Focus
Focus

Device Certificate for a Palo Alto Networks Cloud Service

Table of Contents

Device Certificate for a Palo Alto Networks Cloud Service

Review which Palo Alto Networks cloud service requires a device certificate.
A Palo Alto Networks cloud service is a cloud-hosted service maintained and operated by Palo Alto Networks.
The device certificate must be installed on the firewall, Panorama, and WildFire appliance using the cloud service that is running one of the following releases:
  • PAN-OS 11.0.2 or later releases
  • PAN-OS 10.2.5 or later releases
  • PAN-OS 10.1.10 or late releases
  • (
    EoL
    ) PAN-OS 10.0.5 or later 10.0 releases
  • PAN-OS 9.1.8 or later 9.1 releases
  • (
    EoL
    ) PAN-OS 9.0.14 or later 9.0 releases
  • (
    EoL
    ) PAN-OS 8.1.19 or later 8.1 releases
Review the Palo Alto Networks cloud services listed below that require you install a device certificate to function. Panorama management of firewalls, Dedicated Log Collectors, and WildFire appliances, and downloading content and software updates from the Palo Alto Networks Update Server does not require a device certificate. Additionally, communication between a firewall and the WildFire appliance does not require a device certificate.
Cloud Service
Firewall
(Individual and Panorama-Managed)
Panorama
AIOps
Yes
Yes
App-ID Cloud Engine (ACE)
Yes
Yes
Cloud Services (Prisma Access)
N/A
No
Cortex Data Lake
(
PAN-OS 10.1 and later
) Yes
(
PAN-OS 10.1 and later
) Yes
Device Telemetry
Yes
Yes
Enterprise DLP
Yes
Yes
Inline Categorization
Requires Advanced URL Filtering license
Yes
No
Inline Cloud Analysis
Requires Advanced Threat Protection license
Yes
No
Internet of Things (IoT) security
Yes
Yes
ZTP
No
Yes

Recommended For You