>
    Strata Copilot
    Migration on Strata Cloud Manager Managed Firewalls
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. AI Runtime Security
    4. AIRS VM Firewall
    5. Migrate VM-Series to AI Runtime Firewall (AIRS VM)
    6. Migrating VM-Series to AI Runtime Firewall (AIRS VM)
    7. Migration on Strata Cloud Manager Managed Firewalls
    Download PDF
    Prisma AIRS

    Migration on Strata Cloud Manager Managed Firewalls

    Table of Contents

    Migration on Strata Cloud Manager Managed Firewalls

    Migrate Strata Cloud Manager-managed VM-Series firewalls to Prisma AIRS AI Runtime Firewall using Software NGFW Credits.
    To migrate Strata Cloud Manager managed VM-Series firewall to AI Runtime Firewall (AIRS VM):
    1. Log in to the Customer Support Portal.
    2. Go to SWFW Credits and identify the deployment profile you want to migrate.
    3. Select OptionsEdit Profile.
    4. Toggle the Firewall Type option from VM-Series to Prisma AIRS.
    5. (Optional) Add or remove subscriptions as needed.
    6. Click Update Deployment Profile to save changes.
    7. Click View Devices.
      After the migration is completed, you will observe the following on the Software NGFW Devices page:
      • The authcode of the firewall remains the same.
      • The Deployment Profile Product Type changes to VM or VM-AI based on migration.
      • Software NGFW device changes to AI-powered under the serial number.
      For Strata Cloud Manager managed devices, the license fetch is triggered automatically once the migration is completed on the CSP.
    8. Login to the Strata Cloud Manager console and access your tenant to view the revised firewall models after the migration is completed.
      1. Device Associations: Select System SettingsDevice Associations and view the model updated as AI Runtime Firewall.
      2. Device Management: Go to Device Management. The folder containing the devices associated with the migrated deployment profile will show the updated model. The new model details will also be displayed across various subscriptions, including AIOps, Cloud Identity Engine, Strata Logging Service and Command Center.

    High Availability (HA) Support

    HA pairs can be migrated through Strata Cloud Manager by following the steps 1-7 in Migration on Strata Cloud Manager Managed Firewalls section.

    Migrating AI Runtime Firewall (AIRS VM) to VM-Series

    To migrate from the AI Runtime Firewall (AIRS VM) back to the VM-Series follow the steps 1-7 in Migration on Strata Cloud Manager Managed Firewalls section. Ensure that in step 4, you switch the Firewall Type selection from Prisma AIRS to VM-Series.
    Migrating AI Runtime Firewall (AIRS VM) to VM-Series would consume lesser credits and the system checks for available credits and re-calculates it.

    © 2026 Palo Alto Networks, Inc. All rights reserved.