ZTP - Zero Touch Provisioning on Palo Alto Devices

Showing results for 
Show  only  | Search instead for 
Did you mean: 

ZTP - Zero Touch Provisioning on Palo Alto Devices

L1 Bithead


I just saw this video from Palo Alto on the ZTP feature for branch agencies deployments. 




Is there already any documentation better describing how this feature is working ? I have checked the PAN OS and Panorama Admin Guides for ver 9.1 and there's no mention of a ZTP feature.


Any suggestion would be appreciated.




Cyber Elite
Cyber Elite


You might have to reach out to your SE so that they can look into this for you, as there doesn't seem to be anything really documented about this service. 

If this is something you are looking at implementing, it sounds like they really just made some tweaks to what you already have available through bootstrap process and the init-cfg.xml file; the only thing this service appears to be adding is that PAN is advertising that they'll do this process for you before shipping out the firewall. This is already something they were doing if you were a large enough customer, or some people were doing it directly through their VAR.  

L0 Member

I believe ZTP will be a feature that will be out in 9.2 of the PAN OS. So you may not find so much about it now. 



I believe v9.2 is now v10

and ZTP (zero touch provisioning) is due out in v9.1.3 instead

  • 3 replies
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!