A network installer is attempting to claim a new ION device using the "Claim Code" method. The device is connected to the internet, but the status in…

The ION device onboarding process requires two key steps in the portal: claiming the device and assigning it to a site. The "Claimed" status indicates the device has successfully registered with the Prisma SD-WAN controller, associating its serial number with the tenant account. However, for the device to download its configuration and establish the necessary control and data plane connections to become "Online," it must be assigned to a pre-configured site. This assignment provides the device with its identity, interface roles, circuit information, and policies. The scenario confirms that basic internet connectivity is functional, isolating the problem to a configuration or assignment step within the portal.

B. The ability of a connected laptop to browse the internet strongly implies that outbound TCP port 443 is not blocked, as this port is essential for HTTPS traffic.

C. The software image download is a process that occurs after the device has successfully connected to the controller and received its initial configuration from the site assignment.

D. A "Circuit Label" is part of the site-level configuration. The device cannot receive or apply this label until it has been assigned to the site in the first place.

1. Palo Alto Networks Prisma SD-WAN Administrator’s Guide: In the section "Onboard an ION Device," the workflow explicitly states the required steps. After a device is claimed, the next step is to "Assign the device to a site." This sequence confirms that site assignment is the critical step that follows claiming and precedes the device coming online. The guide notes, "After you claim a device, you must assign it to a site to complete the onboarding process." (Reference: Prisma SD-WAN Administrator's Guide, Chapter: Onboard an ION Device, Section: Workflow for Onboarding an ION Device).

2. Palo Alto Networks Prisma SD-WAN Administrator’s Guide: The "Device State" descriptions in the monitoring section clarify the different statuses. A "Claimed" device is "Associated with a tenant but not yet assigned to a site." An "Online" device is "Connected to the controller and is ready to pass traffic." This documentation directly shows that the missing step between "Claimed" and "Online" is the site assignment. (Reference: Prisma SD-WAN Administrator's Guide, Chapter: Monitor, Section: Devices Dashboard).