topic Re: we have now have the strata cloud manager and cortex data lake etc in AIOps for NGFW Discussions

we have now have the strata cloud manager and cortex data lake etc

din100 — Thu, 25 Jul 2024 13:55:56 GMT

How do we on-board the existing high availability firewalls with working config to be managed with strata cloud manager/AIops guide is only showing us to do the new one.

We don't have panorama we setup Palos NGFW as a manual setup in high availability firewalls.

any help on pointers on this much appreciated obviously we don't want it to default all the setting when we onboard the NGFW

Re: we have now have the strata cloud manager and cortex data lake etc

kaymorrison — Thu, 25 Jul 2024 14:23:11 GMT

Hello,

I've been told that, currently, there is no way to onboard existing NGFWs into Strata Cloud Manager to be managed. You can onboard the firewalls to use the BPA, Feature Adoption, or other items in the Dashboard.

The only way to manage existing firewalls is if they are managed by Panorama and then the Panorama instance is migrated to Strata Cloud Manager management.

I don't see how Palo could not eventually make it an option to migrate existing firewalls into SCM, but as of now it can only be done if they are Panorama managed first. If Palo wants everyone moving towards SCM, they will have to make a way to migrate existing firewalls.

I do see this post, https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/is-there-any-way-to-import-the-configuration-of-brownfield/td-p/590734

Not sure if this could be a possible solution.

Hope this helps!

Kay

Re: we have now have the strata cloud manager and cortex data lake etc

din100 — Thu, 25 Jul 2024 14:53:24 GMT

forget the management then how do I setup the logging without managing the Palo so we can get all the logs in 1 place

Re: we have now have the strata cloud manager and cortex data lake etc

cchristiansen — Thu, 25 Jul 2024 14:58:35 GMT

Cloud Managed configuration for NGFWs is only available with an AIOps for NGFW license, which gives you Strata Cloud Manager. Once you have that, you can request access to cloud managed config through your account team, as it is currently requires a brief discussion with the Product team to see if it will meet your use cases. We are looking at going GA with the Strata Cloud Manager, and cloud managed config piece of the product in the coming months. After GA, you will no longer be required to request access to the feature. Please discuss this with your account team for more information.