Get Started with Strata Cloud Manager

Table of Contents

Built-In Best Practices in Strata Cloud Manager

Get Started with `Strata Cloud Manager`

Here's how to get started using Strata Cloud Manager to manage and monitor Prisma Access and your NGFWs, in a single place.

Where Can I Use This?	What Do I Need?
NGFW, including those funded by Software NGFW Credits Prisma Access (Managed by Panorama or Strata Cloud Manager) Prisma SD-WAN	Each of these licenses include access to Strata Cloud Manager: Prisma Access AIOps for NGFW Premium license (use the Strata Cloud Manager app) Prisma SD-WAN Strata Cloud Manager Essentials Strata Cloud Manager Pro → The features and capabilities available to you in Strata Cloud Manager depend on which license(s) you are using.

Strata Cloud Manager gives you AI-powered, unified management and operations for your NGFWs and SASE network. Here's a cheatsheet on getting started with Strata Cloud Manager for the first time.

If you're planning to use Strata Cloud Manager to onboard and manage Prisma Access, NGFWs (requires AIOps for NGFW Premium), or both together, this includes what you need to know to get started with Shared Management for Prisma Access and NGFWs

(In the hub) Activate Your Licenses
After purchasing a license, you'll receive an email with an activation link. The link launches a guided workflow in the hub; follow the activation workflow for each license you'd like to activate:
Activating any one of these licenses enables Strata Cloud Manager. After you have activated at least one of these licenses, continue to activate any additional licenses or add-on subscriptions.
Launch Strata Cloud Manager
After you activate a Prisma Access, AIOps for NGFW Premium, or Prisma SD-WAN license, the Strata Cloud Manager app will be available to you on the Palo Alto Networks hub, or you can access it directly at stratacloudmanager.paloaltonetworks.com.
Validate Your Licenses
- At the bottom of the navigation menu, select your tenant details and verify the name of the tenant you're using, and your licensed products. Here's more on tenant and subscription management.
- Go to ConfigurationNGFW and Prisma Access to check your Prisma Access license status and details, and see what other details might be available.
  
  It might be that you do not see much data here just yet if you've not yet onboarded NGFWs or if your Prisma Access environment is still provisioning. If that's the case, check back after you've completed the rest of the steps here.
Monitoring and Visibility with Strata Cloud Manager
- Explore a visualized representation of your network and security infrastructure with the Command Center.
- Monitor your Prisma Access environment, Prisma SD-WAN, and your NGFWs. Also explore the dashboards available to you in Insights. Many dashboards also support reports that you can schedule or share with stakeholders.
- Identify and respond to security events quickly using incidents across Prisma Access, NGFWs, and Prisma SD-WAN.
Inline Best Practice Recommendations and Workflows
Learn more about the best practice guidance and automation that's built directly into Strata Cloud Manager.
Strata Cloud Manager Onboarding Settings
Strata Cloud Manager brings together common services in the System Settings menu. Go to System Settings to manage:
- Roles and permissions – Learn more about the roles available on Strata Cloud Manager and associated permissions.
- Device associations – Associate supported cloud applications with your devices.
- Tenant management – Create and manage your hierarchy of business organizations and units, represented by tenants.

Shared Management for Prisma Access and NGFWs

Strata Cloud Manager provides shared config management for Prisma Access and NGFWs. You can onboard NGFWs and Prisma Access users, remote networks, and service connections to Strata Cloud Manager and enforce a common security policy.

Onboarding NGFWs and Prisma Access to Strata Cloud Manager
- Set up Prisma Access and onboard mobile users, remote networks, and service connections:
- Onboard and set up NGFWs:
  - Onboarding and Setup for NGFW Cloud Management
Organizing Your Configuration
When working in Strata Cloud Manager configuration settings, the current Manage: Configuration Scope is always visible to you, and you can toggle your view to manage a broader or more granular configuration. The configuration scope enables you to apply policy globally, or provide targeted enforcement to certain NGFWs or Prisma Access deployments.

Here's more on how to get started with organizing your Strata Cloud Manager configuration:
- System Settings: Folder Management
  Use folders to logically group NGFWs for simplified configuration management. The Prisma Access folders are predefined based on deployment type.
- Configuration: Snippets
  Use snippets to group configurations that you can quickly push to your NGFWs or Prisma Access deployments.
- Configuration: Variables
  Use variables your configurations to accommodate device or deployment-specific configuration objects.
Shared Security Policy for NGFWs and Prisma Access
Strata Cloud Manager gives you unified management for Prisma Access and your NGFWs. Your Strata Cloud Manager security policy is shared, and you can apply it globally across Prisma Access and NGFWs, or target specific settings to Prisma Access deployments or specific groups of firewalls.
Go to ConfigurationNGFW and Prisma Access to get started.
Pushing Configuration Changes to NGFWs and Prisma Access
When managing your Strata Cloud Manager configuration, select Push Config to push configuration changes to your NGFWs and Prisma Access:

You'll be prompted to set the scope of the configuration push, based on your folders. Here's more on how to: