Focus

Next-Generation Firewall

Domains Required for AIOps for NGFW

Table of Contents

Filter

Expand All | Collapse All

Next-Generation Firewall Docs

Getting Started
Administration
Version
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
- PAN-OS 9.1 (EoL)
Networking
Version
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
AIOps
Incidents & Alerts
Release Notes
Version
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 11.2
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1 (EoL)

Enable Telemetry on Devices

Utilize Activity Dashboards

Domains Required for `AIOps for NGFW`

If using a proxy, allow these domains to use AIOps for NGFW.

Where Can I Use This?	What Do I Need?
`NGFW (Managed by Strata Cloud Manager)` `NGFW (Managed by PAN-OS or Panorama)` `VM-Series, funded with Software NGFW Credits`	`AIOps for NGFW Free (use the AIOps for NGFW Free app)` or `AIOps for NGFW Premium license (use the Strata Cloud Manager app)`

If outbound traffic from your devices passes through a proxy, ensure that you have allowed the following FQDNs in order to successfully use AIOps for NGFW.

Domains to Access `AIOps for NGFW`

Allow these domains in order to access the AIOps for NGFW application, regardless of your geographic region.

*.prod.di.paloaltonetworks.cloud
*.paloaltonetworks.com
*.prod.di.paloaltonetworks.com
*.prod.reporting.paloaltonetworks.com
*.receiver.telemetry.paloaltonetworks.com
https://storage.googleapis.com

App-IDs and Domains to Send Telemetry

See TCP Ports and FQDNs Required for for the App-IDs and ports that you must allow on your Palo Alto Networks firewalls to successfully send telemetry data to AIOps for NGFW.

On your proxy server, in addition to allowing the required ports and FQDNs, allow the domain that corresponds to your geographic region so that your devices can send telemetry data to AIOps for NGFW.

Region	Domain
US	http://br-prd1.us.cdl.paloaltonetworks.com/
Europe	http://br-prd1.nl.cdl.paloaltonetworks.com/
UK	http://br-prd1.uk.cdl.paloaltonetworks.com/
Canada	http://br-prd1.ca1.ne1.cdl.paloaltonetworks.com/
Singapore	http://br-prd1.sg1.se1.cdl.paloaltonetworks.com/
Japan	http://br-prd1.jp1.ne1.cdl.paloaltonetworks.com/
Australia	http://br-prd1.au1.se1.cdl.paloaltonetworks.com/
Germany	http://br-prd1.de1.ew3.cdl.paloaltonetworks.com/
India	http://br-prd1.in1.as1.cdl.paloaltonetworks.com/

Enable Telemetry on Devices

Utilize Activity Dashboards

Next-Generation Firewall Docs

Domains Required for AIOps for NGFW

Next-Generation Firewall Docs

Domains Required for `AIOps for NGFW`

Domains to Access `AIOps for NGFW`

App-IDs and Domains to Send Telemetry

Activation & Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Network Security

Visibility & Monitoring

Best Practices

Experts Corner

Domains Required for AIOps for NGFW

Next-Generation Firewall Docs

Domains Required for AIOps for NGFW

Domains to Access AIOps for NGFW

App-IDs and Domains to Send Telemetry

Domains Required for `AIOps for NGFW`

Domains to Access `AIOps for NGFW`