| Where Can I Use This? | What Do I Need? |
|---|
|
|
- VM-Series 10.x or above
- Panorama running PAN-OS 10.1.x or above versions
- Customer Support Portal (CSP) account with one of the
following user roles:
- Superuser, Standard User, Limited User, Threat
Researcher, AutoFocus Trial Role, Group superuser,
Group Standard User, Group Limited User, Group
Threat Researcher, Authorized Support Center (ASC)
User, and ASC Full Service User.
- Superuser access to the VM-Series
firewall
|
To license the firewall during the bootstrapping
process, you must purchase the auth codes and register the licenses
and subscriptions on the Palo Alto Networks Support portal before
you begin bootstrapping.
For the VM-Series firewalls running BYOL (not applicable for usage-based
licensing—PAYG), you must have an auth code bundle that includes the capacity auth
code, support subscription, and any other subscriptions you require. The process of
preparing the licenses for bootstrapping depends on whether the firewall has
Internet access when bootstrapping:
Direct
Internet access—The firewall is connected directly to the Internet.
Indirect Internet access—The firewall is managed by Panorama,
which has direct Internet access and the ability to fetch the license
keys on behalf of the firewall.
No Internet access—The firewall uses an orchestration service
or a custom script to fetch the license keys on behalf of the firewall.
