ZTP - Zero Touch Provisioning on Palo Alto Devices

[CarloTaddei]

Hi,

I just saw this video from Palo Alto on the ZTP feature for branch agencies deployments. 

https://www.paloaltonetworks.com/resources/videos/zero-trust-provisioning

Is there already any documentation better describing how this feature is working ? I have checked the PAN OS and Panorama Admin Guides for ver 9.1 and there's no mention of a ZTP feature.

Any suggestion would be appreciated.

Thanks,

[BPry]

@CarloTaddei,

You might have to reach out to your SE so that they can look into this for you, as there doesn't seem to be anything really documented about this service. 

If this is something you are looking at implementing, it sounds like they really just made some tweaks to what you already have available through bootstrap process and the init-cfg.xml file; the only thing this service appears to be adding is that PAN is advertising that they'll do this process for you before shipping out the firewall. This is already something they were doing if you were a large enough customer, or some people were doing it directly through their VAR.  

[gbudesheim]

I believe ZTP will be a feature that will be out in 9.2 of the PAN OS. So you may not find so much about it now. 

[Converged]

I believe v9.2 is now v10

and ZTP (zero touch provisioning) is due out in v9.1.3 instead