If you have enabled SSL Decryption on Prisma Access, the endpoint agent cannot register to the
Autonomous DEM portal successfully. To enable the endpoint
agent to successfully connect and communicate with the ADEM
portal, you must add the FDQN to an allow list. Note that
the allow list is required only for endpoint agent and ADEM
connectivity and is not required for synthetic tests;
synthetic tests comply with the SSL Decryption policy. You
must add a policy rule with no decrypt for the
FQDNs used by ADEM
so that the endpoint agent can register with the portal. | 
