topic Re: ZTP - Zero Touch Provisioning on Palo Alto Devices in General Topics

ZTP - Zero Touch Provisioning on Palo Alto Devices

CarloTaddei — Sat, 08 Feb 2020 17:16:15 GMT

Hi,

I just saw this video from Palo Alto on the ZTP feature for branch agencies deployments.

https://www.paloaltonetworks.com/resources/videos/zero-trust-provisioning

Is there already any documentation better describing how this feature is working ? I have checked the PAN OS and Panorama Admin Guides for ver 9.1 and there's no mention of a ZTP feature.

Any suggestion would be appreciated.

Thanks,

Re: ZTP - Zero Touch Provisioning on Palo Alto Devices

BPry — Mon, 10 Feb 2020 04:03:39 GMT

@CarloTaddei,

You might have to reach out to your SE so that they can look into this for you, as there doesn't seem to be anything really documented about this service.

If this is something you are looking at implementing, it sounds like they really just made some tweaks to what you already have available through bootstrap process and the init-cfg.xml file; the only thing this service appears to be adding is that PAN is advertising that they'll do this process for you before shipping out the firewall. This is already something they were doing if you were a large enough customer, or some people were doing it directly through their VAR.

Re: ZTP - Zero Touch Provisioning on Palo Alto Devices

gbudesheim — Wed, 25 Mar 2020 19:10:22 GMT

I believe ZTP will be a feature that will be out in 9.2 of the PAN OS. So you may not find so much about it now.

Re: ZTP - Zero Touch Provisioning on Palo Alto Devices

Converged — Tue, 09 Jun 2020 16:08:33 GMT

I believe v9.2 is now v10

and ZTP (zero touch provisioning) is due out in v9.1.3 instead