Deployment Agent Workflows
Automate infrastructure provisioning and onboarding tasks using the Deployment Expert
Agent in Strata Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- Strata Cloud Manager Pro
- This feature is currently in Beta and available on request.
Contact your account team to enable the feature.
- Superuser role (for agent administration, onboarding, and
managing permissions)
- Network Administrator or Security Administrator role (for agent
interaction)
|
This feature leverages a large language model or
generative AI, and may contain errors. Double-check for accuracy before applying
changes.
The Deployment Expert Agent automates infrastructure provisioning and onboarding tasks
across different products. Instead of manually configuring service connections, tunnel
settings, and mobile user profiles, you describe your deployment objective in natural
language, and the agent generates a step-by-step plan to complete the provisioning
workflow.
The Deployment Agent integrates with Strata™ Cloud Manager's configuration data
and APIs to validate prerequisites, detect existing infrastructure, and propose changes
that align with your current tenant configuration.
For complex deployments that span multiple products (for example, onboarding mobile users
to Prisma Access while simultaneously configuring GlobalProtect® gateway settings),
the Deployment Agent coordinates across different products to produce a unified execution
plan.
Supported Workflows
| Workflow | Description |
|---|
| Prisma Access Mobile User - GlobalProtect Onboarding | Automate the end-to-end onboarding of mobile users to Prisma Access
using GlobalProtect, including tunnel configuration and authentication
setup. |
| NGFW Device Onboarding | Onboard new firewall devices to Strata Cloud Manager, including
registration, license activation, and initial configuration
push. |
| Cloud NGFW Deployment Readiness Assessment | Evaluate your environment's readiness for Cloud NGFW deployment and
receive guided recommendations to complete your configuration across
Cloud NGFW for AWS, Cloud NGFW on Azure, and NGFW
environments. |
Common Invocation Examples
| Query | What It Does |
|---|
| @agent/deployment Onboard mobile users to Prisma Access using GlobalProtect | Generates a plan to configure mobile user infrastructure including
authentication, tunnel groups, and split-tunnel settings. |
| @agent/deployment Register this new PA-460 firewall | Initiates device onboarding workflow including serial number
registration, license binding, and base configuration push. |
| @agent/deployment What do I need to deploy Cloud NGFW in AWS? | Runs a deployment readiness assessment and provides a checklist of
prerequisites and recommended configurations. |
