ZTP is designed to simplify and automate the onboarding of new firewalls to Strata Cloud Manager. ZTP streamlines the initial firewall deployment process by allowing network administrators to ship managed firewalls directly to their branches and automatically add the firewall to their tenant after the ZTP firewall successfully connects to the Palo Alto Networks ZTP service. This allows businesses to save on time and resources when deploying new firewalls at branch locations by removing the need for IT administrators to manually provision the new managed firewall. After successful onboarding, Strata Cloud Manager provides the means to configure and manage your firewalls.

The ZTP cloud service supports a direct internet connection to successfully onboard a ZTP firewall to Strata Cloud Manager. The ZTP cloud service does not support an explicit web proxy and is unable to onboard a ZTP firewall to Strata Cloud Manager if an explicit web proxy is configured as a gateway to the internet for your ZTP firewalls and Strata Cloud Manager.

Before you begin setting up ZTP on Strata Cloud Manager, review the Firewall Hardware Quick Start and Reference Guides to understand how to correctly install your firewall to successfully leverage ZTP.