To automate the provisioning of the VM-Series NSX edition firewall, enable communication between the NSX Manager and Panorama. This is a one-time setup, and only needs to be modified if the IP address of the NSX Manager changes or if the capacity license for deploying the VM-Series firewall is exceeded.
Use Panorama to Register the VM-Series Firewall as a Service
Log in to the Panorama web interface. Using a secure connection (https) from a web browser, log in using the IP address and password you assigned during initial configuration (https://< IP address >).
Set up access to the NSX Manager. Select Panorama > VMware Service Manager. Enter the Service Manager Name. On the NSX Manager, this name displays in the Service Manager column on Networking & Security > Service Definitions. (Optional) Add a Description that identifies the VM-Series firewall as a service. Enter the NSX Manager URL —IP address or FQDN—at which to access the NSX Manager. Enter the NSX Manager Login credentials—username and password, so that Panorama can authenticate to the NSX Manager. The ampersand (&) special character is not supported in the NSX manager account password. If a password includes an ampersand, the connection between Panorama and NSX manager fails. Click OK.
Commit your changes to Panorama. Select Commit and Commit Type: Panorama.
Verify the connection status on Panorama.
To view the connection status between Panorama and the NSX Manager. Select Panorama > VMware Service Manager. Verify the message in the Status field. When the connection is successful, the status displays as Registered. This indicates that Panorama and the NSX Manager are in sync and the VM-Series firewall is registered as a service on the NSX Manager. The unsuccessful status messages are: Not connected: Unable to reach/establish a network connection to the NSX Manager. Not authorized: The access credentials (username and/or password) are incorrect. Not registered: The service, service manager, or service profile is unavailable or was deleted on the NSX Manager. Out of sync: The configuration settings defined on Panorama are different from what is defined on the NSX Manager.Click the link for details on the reasons for failure. For example, NSX Manager may have a service definition with the same name as defined on Panorama. To fix the error, use the service definition name listed in the error message to validate the service definition on the NSX Manager. Until the configuration on Panorama and the NSX Manager is synchronized, you cannot add a new service definition on Panorama. No service/ No service profile: Indicates an incomplete configuration on the NSX Manager. If you make a change and need to manually sync, see (Optional) Synchronize the configuration between Panorama and the NSX Manager.
Verify that the firewall is registered as a service on the NSX Manager. On the vSphere web client, select Networking & Security > Service Definitions > Service Managers.
Verify that Palo Alto Networks displays as a vendor in the list of services available for installation.

Related Documentation