Configure and Install the GCP-NCC Integration CloudBlade

1. From the Strata Cloud Manager, navigate to ManagePrisma SD-WANCloudBlades.
2. In CloudBlades, locate the GCP-NCC Integration tile, and click Configure.

3. In the GCP-NCC Integration page, enter the following information in the fields shown below, change where appropriate. The values in the service account JSON file created and downloaded need to be populated in these fields.
   • VERSION: Select the version of the GCP- NCC Integration CloudBlade.
   • ADMIN STATE: For Admin State, select/retain Enabled.
   • PROJECT ID: Enter the project ID, which is a unique string used to differentiate your project from all others in Google Cloud. To locate your project ID, go to the API Console. From the projects list, select Manage all projects. The names and IDs for all the projects you are the member is displayed.
   • CLIENT EMAIL: Enter the email address for the GCP service account. A service account is an identity that Google Cloud can use to run API requests.
   • PRIVATE KEY ID: Enter the private key ID for the GCP service account.
   • PRIVATE KEY: Enter the private key for the GCP service account. Ensure to include everything within quotes from the “private_key” entry in the JSON file.
   • GCP REGIONS: Enter the GCP regions/locations where you want to access the GCP application resources as comma-separated values. Example: asia-south1,us-central1.
   • TRANSIT VPC: For Brownfield (existing deployments), enter the name of the existing Transit VPC. Transit VPC is used to connect the Prisma SD-WAN ION devices to the GCP cloud router and the GCP Application VPC. If one does not exist with that name, a new Transit VPC is created in the specified region.
   • Transit CIDR: For Brownfield (existing deployments), enter region-specific CIDR for Transit VPC subnets as comma-separated values. Example: us-central1:10.255.255.0/24,asia-south1:10.255.254.0/24.

4. Click Save and Install after the settings are configured.