VM-Series Deployment Guide
  1. Home
  2. VM-Series
  3. VM-Series Deployment Guide
  4. License the VM-Series Firewall
  5. Licenses for Cloud Security Service Providers (CSSPs)
Previous
Next
The Palo Alto Networks CSSP partners program allows service providers to provide security as a service or as a hosted application to their end customers. The license offerings that Palo Alto Networks provides for authorized Cloud Security Service Provider (CSSP) partners is different from the offerings for enterprise users.
For CSSP partners, Palo Alto Networks supports a usage-based model for the VM-Series firewalls bundled with subscriptions and support. For CSSP partners, you can combine a term-based capacity license for the VM-Series Models along with a choice of subscription licenses for Threat Prevention, URL Filtering, AutoFocus, GlobalProtect, and WildFire, and support entitlements that provide access to technical support and software updates. For cost-effectiveness, you can also opt for a high availability (HA) option, if you plan on deploying the firewalls in an HA configuration.
Get the Auth Codes for CSSP License Packages Register the VM-Series Firewall with a CSSP Auth Code Add End-Customer Information for a Registered VM-Series Firewall
Get the Auth Codes for CSSP License Packages
To be a CSSP Partner, you have to enroll in the Palo Alto Networks CSSP partners program. For information on enrolling in the CSSP program, contact your Palo Alto Networks Channel Business Manager. If you are enrolled, the Palo Alto Network Support portal provides tools that allow you to select a license package, track license usage, and apply license entitlements.
A license package is a combination of the following options:
Usage term—The pay-per-use options are hourly, monthly, 1-year, and 3-years. VM-Series firewall model—The VM-100, VM-200, VM-300, and VM-1000-HV that give you the model number and the capacities associated with each model. Subscription bundle—The three options are basic, bundle 1, and bundle 2. The basic option does not include any subscriptions; bundle 1 has the Threat Prevention license that includes IPS, AV, malware prevention; bundle 2 has the Threat Prevention (includes IPS, AV, malware prevention), GlobalProtect, WildFire, and PAN-DB URL Filtering licenses. Level of support—Premium support or backline support. Redundant firewalls—The option are either high availability (HA) or without HA. This option is a cost-effective option if you plan to deploy a pair of redundant firewalls.
The offering PAN-VM-300-SP-PREM-BND1-YU, for example, is a one-year term package that includes the VM-300 with premium support and the subscription bundle 1. Each package supports up to a maximum of 10,000 instances of the VM-Series firewall.
After you select your license package, you receive an email with your auth code; the fulfillment process can take up to 48 hours.
Get the Auth Codes for the CSSP License Packages
Log in to the Palo Alto Networks Customer Support web site with your account credentials. If you need a new account, see Create a Support Account.
Select CSSP > Order History, to view the list of auth codes registered to your support account. As you deploy firewalls, you must register each instance of the firewall against an auth code.
Register the VM-Series Firewall with a CSSP Auth Code
To activate the license on your VM-Series firewall, you must have deployed the VM-Series firewall and completed initial configuration. As a CSSP partner, you can choose from the following options to register a firewall:
API— Use the Licensing API if you have a custom script or an orchestration service. With this option, the firewall does not need direct internet access. Bootstrap—Use this option to automatically configure the firewall and license it on first boot. See Bootstrap the VM-Series Firewall. Firewall web interface—You can Activate the License for the VM-Series Firewall (Standalone Version) using the firewall web interface. This workflow is both for firewalls with or without internet access. Customer Support Portal—Use this option to manually register the firewall on the Palo Alto Networks Customer Support portal, as shown below.
Register the VM-Series Firewall on the Customer Support Portal for CSSPs
Log in to the Palo Alto Networks Customer Support web site with your account credentials. If you need a new account, see Create a Support Account.
Select CSSP > Order History, to view the list of auth codes registered to your support account.
Select CSSP > VM Provisioning Auth Codes, select an Authorization Code and click Register VM.
Enter the UUID and CPUID of the VM instance and click Submit. The portal will generate a serial number for the firewall.
You can track the number of VM-Series firewalls that have been deployed and the number of licenses that are still available for use against each auth code. To view all the total number of firewalls registered against a specific auth code, select CSSP > VM Provisioning Auth Codes, then select an Authorization Code and click Provisioned Devices.
Add End-Customer Information for a Registered VM-Series Firewall
For the CSSP licenses, after you register the firewall, you can use the Palo Alto Networks Support portal to link the serial number of the VM-Series firewall with the customer for whom you provisioned the firewall.
Add End-Customer Information for a Registered VM-Series Firewall (Customer Support Portal) Add End-Customer Information for a Registered VM-Series Firewall (API)
Add End-Customer Information for a Registered VM-Series Firewall (Customer Support Portal)
Add End-User Information for a Registered VM-Series Firewall (Customer Support Portal)
Log in to the Palo Alto Networks Customer Support web site with your account credentials.
Select CSSP > Provisioned Devices.
Select the Serial Number and click Add End User Info.
Enter the Account Information for the customer and click Submit to save the details. After you add account information, you can find all firewalls registered to a customer. In Search Existing End User, enter the customer ID or customer name and click Search to find all firewalls provisioned for the customer.
Add End-Customer Information for a Registered VM-Series Firewall (API)
The URL for accessing the API is https://api.paloaltonetworks.com/api/license/ReportEndUserInfo .
An API request must use the HTTP POST method, and you must include HTTP requests headers that include the API key and specify the content type as JSON. API responses are in JSON format.
Add End-User Information for a Registered VM-Series Firewall (ReportEndUserInfo API)
Get your Licensing API key.
Use the ReportEndUserInfo API to add end-user information for a VM-Series Firewall that is registered to a CSSP. URL: https://api.paloaltonetworks.com/api/license/ReportEndUserInfo Headers: Content-Type: application/json apiKey: API Key Parameters: SerialNumbers: Required , provide at least one valid firewall serial number CustomerAccountId: Required CompanyName: Required , end-user company name EndUserContactEmail: Required , end-user email address Address: Required , end-user address Country: Required , 2-digit end-user country code, currently “US” is the only valid value Region: Required , AWS region of the VM-Series firewall deployment City: Required , end-user city name State: Required , 2-digit state code, currently “CA” is the only valid value PostalCode: Required , end-user postal code DnBNumber: Data Universal Numbering System (D-U-N-S) number Industry: End-user industry type, such as networking or consultancy PhoneNumber: End-user phone number WebSite: End-user website URL CreatedBy: System or person submitting this information Sample request to add end-user information for a registered VM-Series firewall using Curl: curl -X POST -H "Content-Type: application/json" -H "apiKey:921d4450e988397138ca8a68vf2fc5d687870b3f11cb9439946a521dc4dc7cd8" "http://api.paloaltonetworks.com/api/license/ReportEndUserInfo?serialNumbers=0001A101234&CustomerAccountId=12345&CompanyName=ExampleInc&DnBNumber=123456789&Address=123 Main St&Country=US&Region=CA&City=Sunnydale&State=CA&PostalCode=12345&Industry=Medical&PhoneNumber=4081234567&WebSite=example.com&EndUserContactEmail=admin@example.com&CreatedBy=Jane Doe" Sample API response : "{"Message": "End User Information Updated Successfully"}"
If you receive an error, see Licensing API Error Codes.
Previous
Next

Related Documentation

License the VM-Series Firewall

License the VM-Series Firewall Before you can start using your VM-Series firewall to secure east-west and north-south traffic on your network, you must activate the ...

Register the VM-Series Firewall

Register the VM-Series Firewall When you purchase a VM-Series firewall, you receive an email that includes an auth code for a capacity license for the ...

Prepare the Licenses for Bootstrapping

Prepare the Licenses for Bootstrapping To license the firewall during the bootstrapping process, you must purchase the auth codes and register the licenses and subscriptions ...

Register the VM-Series Firewall (with auth code)

Register the VM-Series Firewall (with auth code) Register the VM-Series Firewall (with auth code) Log in to the Palo Alto Networks Customer Support web site ...

Activate the License for the VM-Series NSX Edition Firewall

Activate the License for the VM-Series NSX Edition Firewall Panorama serves as the central point of administration for the VM-Series NSX edition firewalls and the ...

Register the Firewall

Register the Firewall Before you can activate support and other licenses and subscriptions, you must first register the firewall. If you are registering a VM-Series ...

License Types—VM-Series Firewalls

License Types—VM-Series Firewalls The following licenses and subscriptions are available for the VM-Series firewall: Capacity License —The VM-Series firewall requires a base license, also called ...

Activate the License for the VM-Series Firewall (Standalone Version)

Activate the License for the VM-Series Firewall (Standalone Version) To activate the license on your VM-Series firewall, you must have deployed the VM-Series firewall and ...

Create a Support Account

Create a Support Account A support account is required to access software updates and to get technical support or open a case with Palo Alto ...

Virtualization Features

Virtualization Features New Virtualization Feature Description VM-Series Firewall for Microsoft Azure The VM-Series firewall can now be deployed in Azure , the Microsoft public cloud. ...

© 2019 Palo Alto Networks, Inc. All rights reserved.