: Panorama-Managed Prisma Access FedRAMP Moderate and FedRAMP High "In Process" Plugin and Dataplane Requirements Through Common Services
Focus
Focus

Panorama-Managed Prisma Access FedRAMP Moderate and FedRAMP High "In Process" Plugin and Dataplane Requirements Through Common Services

Table of Contents

Panorama-Managed
Prisma Access
FedRAMP Moderate and FedRAMP High "In Process" Plugin and Dataplane Requirements Through
Common Services

Learn how to activate your single or multitenant Panorama-managed
Prisma Access
FedRAMP license.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Managed by Panorama)
  • FedRAMP High "In Process" and FedRAMP Moderate
To make sure that your Panorama Managed
Prisma Access
is compliant with FedRAMP, use these guidelines and requirements when installing, activating, setting up for the first time, and configuring
Prisma Access
.
To ensure that
Prisma Access
stays in compliance with FedRAMP Moderate and FedRAMP High "In Process" requirements, make sure that your Panorama Managed
Prisma Access
deployment uses the following Panorama, Cloud Services plugin, and GlobalProtect versions.
Component
Required Version
Panorama PAN-OS version
10.2.8-h3 or 10.2.9-h1 PAN-OS 10.2 versions
Enabling the Processing Standard and Common Criteria (FIPS-CC) on the Panorama that manages
Prisma Access
is the recommended best practice aligned with FedRAMP controls. Enabling FIPS-CC support on Panorama requires accessing the Maintenance Recovery Tool (MRT).
To simplify the installation and activation process, you can select an existing Panorama you have already configured in FIPS mode, if you have registered Panorama, installed the licenses, and activated the support license on the Customer Support Portal (CSP). If you have added the Panorama serial number to the same CSP account on which you want to deploy Prisma Access, you can select the serial number of this Panorama appliance during installation.
You cannot use a Panorama that has been used to manage another Prisma Access or
Cortex Data Lake
deployment.
Cloud Services plugin version
FedRAMP High "In Process": 3.2.1+ or 4.1+
FedRAMP Moderate: 3.2.1-h91 or 4.0.0-h83 or 4.1.0-h53
GlobalProtect version
FedRAMP High "In Process":6.0.7+
FedRAMP Moderate: 5.1.4+ or 6.0.7+

Recommended For You