What Is New With AIOps TSG Migration And Where Can I Find More Information?
Question
What Is New With AIOps TSG Migration And Where Can I Find More Information?
Environment
AIOps for NGFW
Answer
Introduction
Palo Alto Networks is changing how AIOps is deployed and managed, providing customers with a more seamless activation process and onboarding flexibility for firewalls and Panorama onto their AIOps instances.
The processes are not only made more flexible, and easier, it adds a new licensing option for AIOps Premium (ELA), as well as TSG capabilities . That's right, starting on that date, if you activate AIOps, your new AIOps tenant will be available in the tenant-centric view of the Hub.
These changes enable a variety of deployment scenarios requested by customers, such as multi-tenant hierarchy and large organization deployments, which can be managed through the new tenant service group (TSG) hub view.
TSGs provide a logical container for AIOps instances, PAN-OS devices, and other application instances, simplifying the interdependencies and providing a secure activation process. The TSG benefits single-tenant customers by providing a simplified view of assets and application instances, while multi-tenant customers benefit from easier organization, deployment, and management.
For those of you not familiar with TSGs and Tenants, extensive documentation is available here .
Existing AIOps customers will get migrated over the course of February and March 2023.
The move to tenant awareness should not affect AIOps' behavior. Onboarding a new NGFW or Panorama involves receiving a magic link, logging in to the hub, creating a TSG, and adding devices. Migration will be managed by Palo Alto Networks and should not impact infrastructure or services. Look for a banner in the product UI to know when you'll be migrated, and expect no impact during the migration process, which should only take a few minutes.
What else gets migrated simultaneously?
During the migration of AIOps instances to the tenant aware world, all associated applications that are currently linked to AIOps, such as the Cortex Data Lake logging service and the Cloud Identity Engine, will also be migrated simultaneously. However, if there is a dependent product, such as the IoT service, that does not yet support the tenant service group, the AIOps and its associated applications will NOT migrate.
What do I do after the migration is complete?
Once the migration is complete, customers should be able to access their AIOps Free and Premium Instances via the new tenant-centric Hub view. If a customer account has some applications that are not yet ready to migrate to the new Hub view, a toggle switch is provided to switch between the current and the new hub views.
Customers should also watch their product UI for a banner that tells them when their instance is targeted to be migrated and a follow-up banner after the migration is complete. If customers have any issues or concerns after the migration is complete, they can contact Palo Alto Networks customer support for assistance.
Where can I see the new activation process?
Videos showing the new activation process for multiple scenarios are posted here.
Additional Information
TIPS AND TRICKS: AIOPS FOR NGFW