Enable Prisma Agent for NGFW Deployments

Table of Contents

Your Prisma Agent License for NGFW Deployments

Configuration Management Overview for NGFW Support for Prisma Agent

Enable Prisma Agent for NGFW Deployments

Learn how to enable Prisma Agent for your NGFW deployment.

Where Can I Use This?	What Do I Need?
NGFW (Managed by Panorama)	Check the prerequisites for the supported PAN-OS versions Prisma Agent license for NGFW deployments

Review the steps to enable Prisma Agent for your Panorama-managed or unmanaged NGFW deployment. Follow these procedures to activate and configure the necessary components.

You can enable Prisma Agent for a new or existing unmanaged or Panorama-managed NGFW deployment (with an existing TSGid).

Before you begin, contact your Palo Alto Networks representative to purchase the Prisma Agent license for NGFW deployments.

(New NGFW deployment) Activate Strata Cloud Manager Essentials, which is needed to manage Prisma Agent-specific settings such as user authentication and agent configurations.
1. Navigate to the hub.
2. Go to Common ServicesTenant Management.
3. Create a new tenant by selecting All TenantsNew Tenant.
4. After successful tenant creation, search for the tenant you created and Activate Strata Cloud Manager.
5. Complete the activation form.
  Select the appropriate Customer Support Account.
  Select the tenant you created in the previous step.
  Select the Region where you want to deploy Prisma Agents.
  Select Cloud Identity EngineCreate New to create a new Cloud Identity Engine instance for the tenant. Prisma Agent requires Cloud Identity Engine for fetching user groups.
  Agree to the terms and conditions.
  Activate the tenant.
(Existing NGFW deployment with existing TSGid) Search for the tenant and Activate Strata Cloud Manager.