Add a ZTP firewall to be managed by the Panorama management
Log in to the web interface of the Panorama™
management server as a Superuser, Panorama admin, or as the ZTP installer admin to
add a ZTP firewall to Panorama. To add the ZTP firewall, you must
enter the firewall serial number and claim key provided by Palo
Alto Networks and then register the firewall with the ZTP service. Registering
the firewall claims the firewall as an asset in your account in
the Customer Support Portal and allows the ZTP service to associate
the firewall with the Panorama.
adding ZTP firewalls to Panorama, do not perform any commits on the
ZTP firewall before you verify that the firewall is successfully
added to Panorama in Step 4. Performing
a local commit on the ZTP firewall disables ZTP functionality and
results in the failure to successfully add the firewall to Panorama.
verify that the ZTP firewall is successfully added as a managed
Ensure that the
To SW Version
is configured to the correct PAN-OS version so that the firewall
does not upgrade or downgrade unintentionally. ZTP functionality
is supported only for PAN-OS 10.0.1 and later releases. Additionally, the
PAN-OS version must be the same or an earlier version of the PAN-OS
version running on Panorama.