First time Device Security Activation - One Customer Support Portal Account

1. Because you have only one Customer Support Portal account associated with your username, the Customer Support Account is prepopulated.
2. Allocate the product to the Recipient of your choice.

   The name provided matches your Customer Support Portal account for convenience. You can use the name provided or change it.
3. Choose the data ingestion Region, which is the region where the cloud logging service is receiving data from firewalls.
4. Strata Logging Service

   • If you are using Device Security that doesn't require Strata Logging Service, this sends data logs to a cloud logging service that streams them directly to Device Security without storing them in a data lake. Skip to the App Subdomain step.
   • If you are using Device Security that does require Strata Logging Service, add Strata Logging Service.
     1. Select a Strata Logging Service instance.
     2. Enter the amount of data log storage.
     3. The region is grayed out, but is autopopulated with the same region that you used for Strata Logging Service.
5. Enter an App Subdomain.

   Use a unique subdomain to complete the <subdomain>.iot.paloaltonetworks.com URL for your Device Security application. This will be the URL where you log in to the Device Security portal.
6. Agree to the terms and conditions, and Activate.

   A single default tenant is autocreated behind the scenes, and the product is activated in the tenant.

   This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.
7. Go to the Common ServicesDevice Associations tab to add firewalls to the tenant, associate them with the Device Security application, and then apply the Device Security subscription to them: Device Associations.
8. Get started with Device Security.
9. Optional Manage your product.
10. Optional Manage identity and access.