Administration Portal Tasks for SP Administrators And OpCo Administrators
Before a tenant administrator deploys SD-WAN or next generation firewall (NGFW) in CSO, as an SP administrator (for CSO on-premises) or Operating Company (OpCo) administrator (for CSO SaaS), you must perform the following tasks in the Administration Portal. For more information on roles, see Role-Based Access Control Overview.
If you are an SP Administrator (CSO on-premises version) or the Juniper Networks team (CSO SaaS version):
- Log in to the CSO Administration Portal. See Accessing Administration Portal.
- Configure SMTP settings. See Configuring SMTP Settings.
- Download latest signature database. See Downloading a Signature Database.
- (Optional) Customize configuration templates. See Configuration Templates Workflow.
- (Optional) Customize device templates. See Device Template Overview.
- (Optional) Upload the latest software images to CSO. See Uploading a Device Image.
- If you are deploying SD-WAN, perform the following tasks:
- Add one or more points of presence (POPs). See About the POPs Page.
- Add provider hub devices. See Add a Provider Hub Device.
- (Optional) Add an OpCo. See Creating Operating Companies.
- Add a tenant with SD-WAN service, NGFW service, or both services. See Adding a Single Tenant.
- Add CSO licenses. See Add a CSO License.
- To ensure WAN redundancy in CSO, you can preconfigure aggregated Ethernet links enterprise hub devices for tenants. See WAN Link Redundancy in Enterprise Hubs Using Aggregated Ethernet for more information.
If you are an OpCo Administrator:
Log in to the CSO Administration Portal. See Accessing Administration Portal.
(Optional) Configure SMTP settings. See Configuring SMTP Settings.
This task is optional because the SMTP settings are configured by the service provider (for CSO on-premises) or Juniper Networks (for CSO SaaS).
(Optional) Customize configuration templates. See Configuration Templates Workflow.
(Optional) Customize device templates. See Device Template Overview.
(Optional) Upload the latest software images to CSO. See Uploading a Device Image.
(Optional) If you are deploying SD-WAN and you want to add provider hubs for tenants, do the following:
Add one or more points of presences (POPs). See About the POPs Page.
Add data or data and OAM provider hub devices. See Add a Provider Hub Device.
Note:For CSO SaaS, OpCo Administrators should add only provider hub devices with DATA_ONLY capability because Juniper Networks adds the OAM-capable hubs.
Add a tenant with SD-WAN service, NGFW service, or both services. See Adding a Single Tenant.
Assign CSO licenses to tenants. See Add a CSO License.
To ensure WAN redundancy in CSO, you can preconfigure aggregated Ethernet links enterprise hub devices for tenants. See WAN Link Redundancy in Enterprise Hubs Using Aggregated Ethernet for more information.