domains / families / security / deploying-palo-alto-prisma-access-zero-trust

deploying-palo-alto-prisma-access-zero-trust

separate

Deploys Palo Alto Networks Prisma Access for SASE-based zero trust network access, configuring GlobalProtect agents, ZTNA Connectors, security policy enforcement, and Strata Cloud Manager integration for unified management. Use when implementing enterprise-grade SASE with integrated ZTNA/SWG/CASB/FWaaS, replacing both VPN and branch firewalls with cloud-delivered security, or integrating ZTNA with an existing Palo Alto NGFW estate.

When to use

• When implementing enterprise-grade SASE with integrated ZTNA, SWG, CASB, and FWaaS
• When replacing both VPN and branch office firewalls with cloud-delivered security
• When needing advanced threat prevention (WildFire, DNS Security) for remote access traffic
• When deploying zero trust for both mobile users and remote network (branch) connections
• When integrating ZTNA with existing Palo Alto NGFW infrastructure via Strata Cloud Manager

When not to use

• small organizations (< 200 users) where simpler ZTNA solutions suffice
• environments requiring only web application access without full network security
• budget constraints preclude enterprise SASE licensing

Skill page

Source