: Create a Deployment Profile
Focus
Focus

Create a Deployment Profile

Table of Contents

Create a Deployment Profile

Use the CSP to create a Software NGFW deployment profile for PAN-OS 10.0.3 and earlier, or PAN-OS 10.0.4 or later.
To create a deployment profile, you must have a Customer Support Portal account (CSP) and access to an activated credit pool.
Before you begin, estimate the number of firewalls that will use the configuration in the deployment profile. You don't have to deploy all the firewalls at once.
  1. If you already have a credit pool, log into the account, and from the dashboard, select ProductsSoftware NGFW CreditsCreate Deployment Profile.
    If you have activated a credit pool you see the Create Deployment Profile form.
    1. Select the VM-Series firewall type.
    2. Select the PAN-OS version.
      Fixed models are legacy models and Palo Alto Networks recommends using Flexible vCPUs.
    3. Click Next.
  2. VM-Series profile.
    1. Profile Name.
      Name the profile.
    2. Number of Firewalls.
      Enter the number of firewalls this profile deploys, assuming you have sufficient credits. Credits are only deducted when a firewall is deployed.
    3. PAN-OS 11.1.3 and later releasesNumber of vSYS
      Enter the number of virtual systems support that you require on your VM-Series firewall.
      Use a flexible VM-Series firewall license and Tier 3 or Tier 4 instances supporting a minimum of 16 vCPUs or more.
      • VM-Series in Tier 3 instance supports a maximum of 25 virtual systems.
      • VM-Series in Tier 4 instance, supports a maximum of 100 virtual systems.
      For information on the maximum number for a particular object or resource that a single VM-Series firewall deployment can create, store, manage, or interact with based on allocated memory or tier, see Maximum Limits Based on Tier and Memory.
    4. Firewall Model:
      Choose a VM-Series model.
      Planned vCPU/Firewall (PAN-OS 10.0.4 or above).
      Enter the number of vCPUs per firewall.
      Security Use Case: Choose a use case.
    5. Customize Subscriptions.
      After selecting a use case, you can add or remove security services.
    6. (optional) Use Credits to Enable VM Panorama.
      Choose the Panorama use cases—Management and/or Log Collector.
    7. Choose the type of Strata Cloud Manager subscription that you have subscribed to—Strata Cloud Manager, Strata Cloud Manager Pro, or Strata Logging Service.
      The Strata Cloud Manager, Strata Cloud Manager Pro, or Strata Logging Service and mutually exclusive, in that you can only subscribe to one of the three options.
    8. (optional) Hover over the question mark to check for the additional subscriptions that are included in the selected option. For example,
      • Strata Cloud Manager comprises AIOps and Cloud Management. Note: If you subscribe to SCM, you will need an additional purchase and activation of Strata Logging Service (CDL TB SKUs) to activate it.
      • Selecting the Strata Cloud Manager Pro option includes subscription to AIOps, Autonomous Digital Experience Management (ADEM), Strata Logging Service (SLS), and Cloud Configuration Management.
      • Selecting Strata Logging Service provides a subscription to SLS only. Note: If you wish to subscribe to SCM, and SLS you will then need to select SCM Pro.
  3. (optional) Hover over the question mark following Protect more, save more to see how your credit allocation affects savings.
  4. Click Calculate Estimated Cost to view the credit total, and the number of credits available before the deployment.
    (optional) Hover over the question mark following the estimate to view the credit breakdown for each component.
  5. Create the Deployment Profile.
    You might have to wait several seconds for the profile to appear in the Current Deployment Profiles tab list. Before the allocation is complete, the Credits Consumed or Allocated column shows 0 and Update Pending. Scroll to the bottom and go to the last page to find your profile.
    To view your deployment profile later on, click the Details button on the parent credit pool and select Current Deployment Profiles.
    • Note the auth code for your profile on the far right; Software NGFW credit auth codes start with D.
    • The Credits Consumed or Allocated column shows 0 and Update Pending before the allocation is complete.
    • The Audit Trail tab shows Credit Transactions and the Deployment Profiles you manage. You can also search for a profile by time in this tab.
      Use search to locate your profile, and expand the row to view the configuration you specified when you created the profile.