Not receiving a Zone Protection Profile Threshold Recommendation from AIOps

[NavyTech]

I'm trying to use AIOps to get a suggested DoS protection baseline. The first method suggested by this guide is to use Zone Protection profile Threshold Recommendation alerts from the AIOps.

I have two Palos that have been sending telemetry data for AIOps for 3 weeks now, but so far this alert has not been generated. Does anyone have any experience using this alert from AIOps?

I found a single help article about it. The tags in the article hint that it may be a 10.2 feature, and I'm using 10.1. But those are just article tags, not anything specified in the article itself.

[ozheng]

Hello @NavyTech ,

Are you using AIOps-Free or AIOps-Premium?

Maybe the thresholds are part of AIOps-Free.
(the AIOps plugin for Panorama is to use with AIOps-Premium)

[NavyTech]

I am using AIOps-free. I have a PA-5250 and PA-450 reporting to it, both on 10.1.9 versions. Not using Panorama.

[ozheng]

Probably part of Premium feature.

[svenkatarama · Accepted solution]

The ZPP-related Alerts are in Premium AIOps.

BTW, here's the link to the AIOps Alerts reference page- https://docs.paloaltonetworks.com/ngfw/incidents-and-alerts/alerts-reference

[NavyTech]

Bah, that's what it is. Thanks for the help.