How to Activate and Install Logging Service and GlobalProtect Cloud Service for Evals
The following procedure walks you through the steps to license, download, and install the Cloud Services plugin on Panorama. In order to configure the firewalls to send logs to the Logging Service, the following components are required:
- Panorama virtual appliance running Panorama 8.0.5 or later.
- Cloud services plugin version 1.1.0 or later installed on Panorama.
- Next-gen firewalls with a valid support license that are managed by Panorama and are running PANOS 8.0.5 or later.
- Panorama is required to provision the certificate that the firewalls need to securely connect to the Logging Service. Therefore, only firewalls that are managed by Panorama can forward logs to the Logging Service.
How to install the Panorama virtual appliance and perform initial configuration.
Register Panorama and activate the support license.
STEP 1 | Activate the Logging Service.
- Log in to the Customer Support Portal (https://support.paloaltonetworks.com)
- Go to Assets > Cloud Services > Activate Cloud Services Auth-Code.
- Enter the Logging Service auth code you received in the Software Evaluation Approved email, select the Panorama Serial Number for the Panorama you plan to use, and select the Logging Region. Click Agree and Submit.
- After successfully activating Logging Service, the screen should show the new Logging Service product with the newly generated serial #.
STEP 2 | Retrieve the Logging Service license on Panorama.
- Select Panorama > Licenses and click Retrieve license keys from license server.
- Verify that you see the Logging Service license and the premium support license.
STEP 3 | Install the Cloud Services plugin on Panorama.
- Go to the Customer Support Portal (https://support.paloaltonetworks.com)
- From the navigation menu on the left side, select Updates -> Software Updates.
- Select Panorama Integration Plug In from the Filter By drop-down.
- Find the Cloud Services section and download version 1.1.0 or later.
- From the Panorama webGUI, select Panorama > Plugins > Upload and Browse for the "cloud_services" plugin file that you just downloaded.
- Install the plugin.
- After successful installation, Panorama refreshes and the new Cloud Services menu displays on Panorama
STEP 4 | Verify your account. You must be a super user in the support account to view the OTP button.
When you try to use the Cloud Services plugin for the first time after installing it, you will be prompted to verify your account. This step ensures that the Panorama serial number is registered to use the Logging Service, and enables a secure communication path between the Logging Service and Panorama.
- Go to the Customer Support Portal (https://support.paloaltonetworks.com)
- From the navigation menu on the left side, select Assets > Cloud Services.
- Click Generate OTP.
- Select the serial number for the Panorama where you installed the Cloud Services plugin and click Generate OTP.
- Click Copy to Clipboard.
- Go back to the Panorama webGUI and click Panorama > Cloud Services > Status to display the Verify Account dialog.
- Paste the OTP you just generated and click Verify.
- You have ten minutes to enter the OTP before it expires.
STEP 5 | Verify that the Logging Service is provisioned in the theatre you chose
- Go to Panorama > Cloud Services > Configuration > (Logging Service) Service Setup.
- You must configure NTP rather than setting the date and time manually so that Panorama can stay in sync with the Logging Service.
- To configure NTP, select Panorama > Setup > Services > NTP. Set a value for the NTP server, for example pool.ntp.org.
STEP 6 | Configure the Firewalls to Forward Logs to the Logging Service
STEP 7 | Activate the GlobalProtect cloud service auth codes
- Go to the Support Portal and select Assets > Cloud Services > Activate Cloud Services Auth-Code.
- To license the GlobalProtect cloud service for remote networks and/or for mobile users, enter the auth code you received in the email, select the Panorama Serial Number that you installed the Cloud Services plugin on, and then click Agree and Submit.
STEP 8 | Retrieve the GlobalProtect cloud service license(s).
- Go to the Panorama webGUI and select Panorama > Licenses and click Retrieve license keys from license server.
- Verify that you have the licenses for the GlobalProtect cloud service components you plan to use.
- **Note: You may need to re-do the OTP authentication after activating the GPCS licenses.**
STEP 9 | Prepare Panorama to Push Configuration to the GlobalProtect Cloud Service
See Also
For a full list of other Support Portal User Documents, please click here:
Attachments