Strata Cloud Manager
Device Telemetry for AIOps for NGFW
Table of Contents
Device Telemetry for AIOps for NGFW
Learn about how AIOps for NGFW uses PAN-OS
device telemetry.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
One of these:
|
AIOps for NGFW assesses
the health of the firewalls in your deployment by analyzing telemetry
data that your PAN-OS devices send to Strata Logging Service. To send
this data, you must have enabled device telemetry on
your devices.
Once telemetry is configured, your next-generation firewalls send raw telemetry data to Strata Logging Service at fixed intervals. Strata Logging Service parses and translates this raw data so that AIOps for NGFW can provide you with device status, visualizations, and alerts.
Onboard your devices to
begin sending device telemetry to AIOps for NGFW.
Enable Telemetry on Devices
Follow the steps below to use AIOps for NGFW with your PAN-OS devices.
If your outbound traffic passes through a proxy, ensure that you have allowed the
Domains Required for AIOps for NGFW.
You need to onboard Panorama on AIOps for NGFW if you are onboarding
Panorama-managed deployments.
- Confirm the device is registered in the Customer Support Portal by logging in to support.paloaltonetworks.com, switch to your account (if necessary), and identify your device in .
- Install a device certificate on the devices you want to onboard.
- Enable telemetry sharing on the devices.After you onboard the devices and enable telemetry, it takes around couple of hours for the first set of insights to be visible on the AIOps for NGFW dashboard. The process of generating and sending telemetry on the device's side is done in batches, with each metric being sampled and collected at a frequency optimized for the use-cases the metric is used for. This batch process can result in a delay between onboarding the firewall and the availability of insights. It might take several hours for all insights associated with a newly onboarded device to appear on the AIOps for NGFW dashboard.