topic Re: AIOPs for multitenant Panorama in AIOps for NGFW Discussions

AIOPs for multitenant Panorama

PRyncevic — Tue, 10 Jan 2023 20:22:49 GMT

Hello,

For the scenario of a managed services provider, one Panorama is used to manage firewalls of separate tenants

A few months ago this was working - the device health and other info was showing up in the app portal under the firewall owner's tenant AIOPs page. The security alerts/health (BPA critical/warnings) were showing up under the MSP's AIOPs app under the particular device groups for the separate managed firewalls of various clients.

Now the security alerts stopped showing under the MSP AIOPs app. I raised a case with support and was told that Palo AIOPs doesn't support a multitenant scenario:

"Currently, AIOPs don't support multi-tenant use cases. If all firewalls belonging to a particular DG, aren't part of AIOPs instance, those alerts are not shown or triggered. It is recommended to have panorama and all the firewalls under the same AIOPs ID to get the most out of it."

We need this functionality, how do we get security alerts to work for firewalls managed by a multitenant panorama?

Thank you

Re: AIOPs for multitenant Panorama

lir — Wed, 11 Jan 2023 20:58:50 GMT

Hi PRyncevic,

AIOps does'nt support multi-tenant support.
For example: Panorama is in instance 1 and firewall is in other, you may not see security alerts in instance 1

Thank you

Regards,
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*

live.paloaltonetworks.comlive.paloaltonetworks.com

AIOps for NGFW Discussions | Palo Alto Networks

This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

Re: AIOPs for multitenant Panorama

PRyncevic — Thu, 12 Jan 2023 09:46:28 GMT

Hi Likitha, thank you for your reply

Is MTP support on the roadmap? If not, how do we request this feature?

Thanks

Re: AIOPs for multitenant Panorama

PRyncevic — Mon, 16 Jan 2023 11:22:22 GMT

Hello, any update to this? Thank you

Re: AIOPs for multitenant Panorama

lir — Wed, 18 Jan 2023 16:28:23 GMT

Hi @PRyncevic,

I replied to you in private message but haven't heard back , did you receive my message? If you need any other info please let me know

live.paloaltonetworks.comlive.paloaltonetworks.com

AIOps for NGFW Discussions | Palo Alto Networks

This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

Re: AIOPs for multitenant Panorama

PRyncevic — Wed, 18 Jan 2023 17:43:27 GMT

Hey Likitha, there is nothing in my PMs, please see attached

Re: AIOPs for multitenant Panorama

lir — Wed, 18 Jan 2023 18:23:31 GMT

Hi @PRyncevic,

To request this feature kindly contact your SE, they can help you out with this.

Thank you

live.paloaltonetworks.comlive.paloaltonetworks.com

AIOps for NGFW Discussions | Palo Alto Networks

This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

Re: AIOPs for multitenant Panorama

lir — Fri, 20 Jan 2023 15:31:05 GMT

Hi @PRyncevic.

I wanted to follow up with you to know if you still need any assistance on the issue. Regards,

Thanks and Regards
Likitha R
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions
*Don’t forget to accept the solution provided!*
live.paloaltonetworks.comlive.paloaltonetworks.com
AIOps for NGFW Discussions | Palo Alto Networks

Re: AIOPs for multitenant Panorama

PRyncevic — Fri, 20 Jan 2023 16:57:02 GMT

Hey, i am unable to send you messages

I think livecommunity is not a suitable way to get assistance with these issues, can i raise a ticket through the support portal instead?