Activate and Launch Prisma SD-WAN
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Activate and Launch Prisma SD-WAN
Prisma SD-WAN
Let us learn to activate and launch
Prisma SD-WAN
.Activate and launch the
Prisma SD-WAN
web interface based on your license. Prisma SD-WAN
activation varies depending on the status of your transition to the Prisma™ SASE Platform. See the table to
learn your status and how to proceed.Prisma SD-WAN User | Activation Flow | Access to Prisma SD-WAN |
---|---|---|
First time activation Are you brand new to
Prisma SD-WAN (You activated Prisma SD-WAN after August
2022)?You're already on the Prisma SASE
Platform and your tenant is Tenant Service Group (TSG)
migrated. | After you purchase your Prisma SD-WAN
licenses, you’ll receive an activation email. The email includes
a link that launches a guided activation.Get Started with Prisma SASE and begin
the activation process
. | Access Prisma SD-WAN from the Prisma SASE
platform. |
Transitioned to Prisma SASE (TSG Migrated) Was
your Prisma SD-WAN tenant recently transitioned to the Prisma
SASE Platform? How to locate your TSG ID:
| You will need to create and activate your
account on the Prisma SASE platform. | Access Prisma SD-WAN from the Prisma SASE
platform. |
Pre-transition (Not yet TSG Migrated, license purchased before
March 2021) If you have purchased your Prisma SD-WAN license and ION
devices before March 2021, and your tenant is not TSG
migrated. | Not applicable | Use your direct link to access
. |
Pre-transition (Not yet TSG Migrated, license purchased after March
2021) If you have purchased your Prisma SD-WAN license and ION
devices after March 2021, and your tenant is not TSG
migrated. | Your order fulfillment email includes a magic link. This magic
link enables you to activate your
license from a tile on the Palo Alto Networks
hub. | Access Prisma SD-WAN from the hub. |
- LaunchPrisma SD-WANIf you have purchased yourPrisma SD-WANlicense and ION devices before March 2021, and your tenant is not TSG, you have a direct link to launch thePrisma SD-WAN. Starting September 2021, you will be associated with a Customer Support Portal (CSP) account in the Palo Alto Networks Hub. You can now launchPrisma SD-WANthrough the Palo Alto Networks hub also.However, you must have the CSP sign-in credentials to sign in to the Palo Alto Networks Hub.
- Contact your Sales Engineer for the sign-in credentials for the Customer Support Portal (CSP).
- After you obtain the Username and Password, sign in to the hub using the provided credentials.
- Click thePrisma SD-WANtile to launch thePrisma SD-WANweb interface. There is no activation required.
- Read and agree to the End User License Agreement to launch the Prisma SD-WAN web interface.
- When you sign in to your Customer Support Portal account, clickto edit the user roles of the users fromMembersManage UsersEdit User.
- If you have theSuper Userrole, then you can clickto add a new user in the CSP account. We recommend only oneMembersCreate New UserSuper Userrole in the CSP account. With aSuper Userrole in the CSP account, you have aTenant Superrole in the Prisma SD-WAN application. You can optionally create a new user in the CSP account as aStandard Userwho has view-only permissions in the CSP account. However, the new Standard User created in the CSP account can then be changed toIAM Administrator,Network Administrator,Security Administrator, orView-only Userin thePrisma SD-WANapplication as per the previously existing user roles for that user inPrisma SD-WAN.
- The existing users in thePrisma SD-WANapplication are not migrated to the CSP account and the existing user roles and privileges continue to remain unchanged. You can create a new user in the CSP account as aStandard User, who can then launchPrisma SD-WANfrom the Hub. A new user created in the CSP account has a corresponding new user created in thePrisma SD-WANapplication also. Thus, you may find duplicate user roles in thePrisma SD-WANapplication if the existing user roles in Prisma SD-WAN are created by the same name in the CSP account also.
- The user roles seen in thePrisma SD-WANapplication and the CSP account may not map to each other with similar user roles. Thus, any change made to the user role in thePrisma SD-WANapplication will not reflect in the CSP account user role for the same user.
- If you delete a user in thePrisma SD-WANapplication, you must manually delete the same user from the CSP account.
- Activate and Launch.Prisma SD-WAN
- ActivatePrisma SD-WAN.
- Click the magic link.
- SelectPrisma SD-WAN.
- ClickStart Activationto activate the product.
- Select a customer support account forPrisma SD-WAN.
- To assign a customer support account, select aCustomer Support Account.
- ClickNext.
- Set up selections.
- Select aRegion.
- Select a value for theTotal Number of Anticipated Devices.Verify that the hardware device count matches your order.
- Agree to the terms and conditions.
- Confirm Selections.The progress bar indicates the activation status of your product.
If the activation fails, create an Admin case for assistance. Ensure to take a screen capture of the error. Include the URL and error code in the support ticket or the link from the order fulfillment email, which you used to start the activation process. The URL and error code helps the support engineer troubleshoot the issue. - LaunchPrisma SD-WAN.ClickLaunch Prisma SD-WANto access thePrisma SD-WANweb interface.Click thePrisma SD-WANtile on the hub to launch the application in future.
After activation of thePrisma SD-WANapplication, you can manage user roles in thePrisma SD-WANapplication. If you have aSuper Userrole in theCustomer Support Portal, then the first time you access thePrisma SD-WANapplication through the Palo Alto Networks hub, you will have theSuper Administratorrole in thePrisma SD-WANapplication. If you are not assigned aSuper Userrole in the CSP, you will have aView-only Userrole in thePrisma SD-WANapplication.This role can be changed by another user with Super or IAM privileges to any other role defined in thePrisma SD-WANapplication. When you next log in to thePrisma SD-WANapplication from the hub, you will have privileges inPrisma SD-WANas defined by your user role. - Create and activate your Prisma SASE account.When yourPrisma SD-WANtenant is migrated to a Tenant Service Group (TSG), you will see this notification when you log in to thePrisma SD-WANweb interface.Use the activation link in your email to activate your account.
- Click theActivate Accountbutton in your email.
- Set your password and then clickCreate My Account.
- Set up multi-factor authentication and then clickFinish.
- Log in to Prisma SASE.Your view of tabs and widgets will be based on your license.