Enable Available Add-Ons for Prisma Access (Managed by Strata Cloud Manager) and Add-Ons Through Common Servicess

1. Products or Add-ons are enabled by default based on your contract. Disable (deselect) add-ons you don’t want to activate now, such as Autonomous DEM and Service Connection.

   1. Select a New or existing instance.
   2. For the CASB Bundle, SaaS Security Inline URL Subnet is the URL to launch the corresponding service web interface.
   3. For IoT Security, enter a unique App Subdomain to complete the <subdomain>.iot.paloaltonetworks.com URL for your IoT Security application. This is the URL where you log in to the IoT Security portal.
2. Add your Strata Logging Service for storing tenant data such as configuration, telemetry logs, system logs, and stats.

   • Allocate part of the available storage to this tenant if you want to conserve part of the storage for another tenant. Allocating a part of the available log storage to a Prisma Access tenant will restrict the types of logs that can be stored. The list of applications that can use these logs will also be restricted. Caveats follow for Strata Logging Service with split license (with the available storage split between multiple Prisma Access devices).
     • Log Ingestion and Storage
       • Only the following log types received from the specific Prisma Access using the split-license Strata Logging Service will be stored:
         • Network logs
         • System logs
       • Other log types (such as Endpoint logs and Audit logs) are not supported.
       • Other firewall types (such as NGFWs and CNGFWs) can't be associated with a split-license Strata Logging Service.
     • Applications — The following applications are not supported:
       • Cortex XDR
   • Allocate the entire available storage to this tenant if you don't have other tenants or if you will purchase additional capacity to allocate to your other tenants.
   • Based on your license, you need a minimum capacity to share with another tenant. For example, a Prisma Access local and business licenses require 1 TB.
   • See Strata Logging Service Administration Guide.
3. Agree to the Terms and Conditions.
4. Activate Now. The products and add-ons that you're activating (such as Prisma Access or Strata Logging Service) are now provisioned. As the subscriptions are activating, the progress status will display. When the process is complete, the tenant status displays as Up. You now have a tenant provisioned with instances of the products that you purchased. The tenant has one user — the account that you used when you began this process.
5. To complete the product setup, you must access the products you purchased and perform any required postinstallation configuration. For information about your products, see:

   • Open APIs
   • Strata Logging Service
   • Prisma Access
   • Prisma Access
   • Next-Generation CASB
   • Enterprise DLP
   • Autonomous DEM in
   • Onboard IoT Security
6. (Optional) In a multitenant hierarchy, monitor your tenants with the Prisma Access.
7. (Optional) add user access and assign roles.