Focus
Focus
Table of Contents

About ZTP

The Zero Touch Provisioning (ZTP) plugin simplifies and automated the on-boarding of new firewalls to the Panorama™ management server.
Zero Touch Provisioning (ZTP) is designed to simplify and automate the on-boarding of new firewalls to the Panorama™ management server. ZTP streamlines the initial firewall deployment process by allowing network administrators to ship managed firewalls directly to their branches and automatically add the firewall to the Panorama™ management server after the ZTP firewall successfully connects to the Palo Alto Networks ZTP service. This allows businesses to save on time and resources when deploying new firewalls at branch locations by removing the need for IT administrators to manually provision the new managed firewall. After successful on-boarding, Panorama provides the means to configure and manage your ZTP configuration and firewalls.
The ZTP cloud service supports a direct internet connection to successfully onboard a ZTP firewall to Panorama management. The ZTP cloud service does not support an explicit web proxy and is unable to onboard a ZTP firewall to Panorama management if an explicit web proxy is configured as a gateway to the internet for your ZTP firewalls and Panorama.
Review and subscribe to ZTP Service Status events to be notified about scheduled maintenance windows, outages, and workarounds.
ZTP is supported on the following ZTP firewalls:
  • PA-400 Series Firewalls
  • PA-820-ZTP and PA-850-ZTP
  • PA-1400 Series Firewalls
  • PA-3220-ZTP, PA-3250-ZTP, and PA-3260-ZTP
  • PA-3400 Series Firewalls
  • PA-5400 Series Firewalls
  • PA-5450
Before you begin setting up ZTP on Panorama, review the Firewall Hardware Quick Start and Reference Guides to understand how to correctly install your firewall to successfully leverage ZTP.