Enable Prisma Access Agent for NGFW Deployments

Table of Contents

Your Prisma Access Agent License for NGFW Deployments

Configuration Management Overview for NGFW Support for Prisma Access Agent

Learn how to enable Prisma Access Agent for your NGFW deployment.

Where Can I Use This?	What Do I Need?
NGFW (Managed by Panorama)	PAN-OS version 11.2.x Prisma Access Agent version 25.1.0.14 Prisma Access Agent license for NGFW deployments macOS 14 and later or Windows 10 version 2024 and later desktop devices

Review the steps to enable Prisma Access Agent for your NGFW deployment. Follow these procedures to activate and configure the necessary components.

You can enable Prisma Access Agent for a new NGFW deployment, an existing NGFW deployment (with an existing TSGid), or Strata Cloud Manager Pro for NGFW deployment.

Before you begin, contact your Palo Alto Networks representative to purchase the Prisma Access Agent license for NGFW deployments.

(New NGFW deployment) Activate Strata Cloud Manager Essentials, which is needed to manage Prisma Access Agent-specific settings such as user authentication and agent configurations.
1. Navigate to the hub.
2. Go to Common ServicesTenant Management.
3. Create a new tenant by selecting All TenantsNew Tenant.
4. After successful tenant creation, search for the tenant you created and Activate Strata Cloud Manager.
5. Complete the activation form.
  Select the appropriate Customer Support Account.
  Select the tenant you created in the previous step.
  Select the Region where you want to deploy Prisma Access Agents.
  Select Cloud Identity EngineCreate New to create a new Cloud Identity Engine instance for the tenant. Prisma Access Agent requires Cloud Identity Engine for fetching user groups.
  Agree to the terms and conditions.
  Activate the tenant.
(Existing NGFW deployment with existing TSGid) Search for the tenant and Activate Strata Cloud Manager.