: FAQ: FedRAMP Moderate Customers TSG Migration and SASE Platform
Focus
Focus

FAQ: FedRAMP Moderate Customers TSG Migration and SASE Platform

Table of Contents

FAQ: FedRAMP Moderate Customers TSG Migration and SASE Platform

Frequently asked questions regarding changes to the hub, apps, subscription management, tenant management, TSG migration, identity and access management, and more for FedRAMP Moderate.
The following topics address frequently asked questions regarding changes to the hub, apps, subscription management, tenant management, identity and access management, and more.
As you might have heard, the Strata Cloud Manager for Prisma Access is going live in January 2024. Beginning January 2024 we will start transitioning active FedRAMP Moderate Prisma Access customers to the Strata Cloud Manager.

What is the SASE Platform?

You will see a new and revamped user-friendly process and management interface providing a natural SaaS activation experience. We have created sase.paloaltonetworks.com as a single location to access and manage anything and everything related to SASE for FedRAMP Moderate.
This page has three main components:
  • Subscription management: You will be able to manage all the available licenses from a single pane of glass. You can view the status and activate all your available licenses. You can request evaluation to production conversions from the product. There will be automatic detection of activation failure and you can raise TAC tickets from the product.
  • Tenancy management: You will have the ability to create and manage multiple tenants, build a hierarchy, and share and allocate license subscriptions for the desired tenants.
  • Identity and access management: This is a centralized authentication and authorization page to allow you to add user roles and permissions, for all applications and API-based access.

What does this transition mean to existing customers activated before January 2024?

In the back-end, we are migrating all existing FedRAMP Moderate tenants in waves starting from January 2024 to use sase.paloaltonetworks.com.

What does this migration mean?

In the backend, we are migrating FedRAMP Moderate Prisma Access tenants to a TSG (Tenant Service Group) in phases to begin in January 2024.
  • A TSG is like a container that contains an instance of multiple products. For example, one TSG will contain a Prisma Access instance, a Strata Logging Service instance, and a CDSS service instance.
  • You will have access to the Identity and Access module for user roles and permissions and access to APIs from a centralized API gateway.
  • You won't have any service disruption or any impact on infra or dataplane.

What will you see after this transition?

  • You will manage all new license activations from the subscriptions and tenants page on sase.paloaltonetworks.com. This page will handle all license activations, and provide the ability to manage multiple tenants.
  • You will manage all existing users on the Palo Alto Networks via the Strata Cloud Manager. You will have to make any changes to the users and roles on the Identity and Access Management module on sase.paloaltonetworks.com going forward. In the backend, we are mapping existing user roles to the same or similar role on the Identity and Access Management page.

Any other references?

Refer to more information about TSG and Strata Cloud Manager: