Additional Firewall Requirements

Additional requirements include the following:

• Firewalls should have required security services licenses for monitoring traffic and generating logs.
• Firewalls supported by an On-Premises Analytics instance must be in a single group or tenancy.
• Firewalls added to On-Premises Analytics should not have NSM Advanced licenses enabled in CSC.
• Firewalls with NSM Advanced licenses added to CSC using Zero Touch are not supported for On-Premises Analytics.
• Each firewall must have HTTPS management enabled.

If a firewall is behind a NAT device, then the HTTPS management port must be opened for the cloud services to communicate with the firewall.