Focus

Prisma Access Agent

Prisma Access Agent Prerequisites

Table of Contents

Configuration Management Overview for NGFW Support for Prisma Access Agent

Set Up Cloud Identity Engine for Prisma Access Agent User Authentication

Prisma Access Agent Prerequisites

Learn about the prerequisites for the Prisma Access Agent.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Panorama)	Check the prerequisites for the deployment you're using Contact your Palo Alto Networks account representative to activate the Prisma Access Agent feature

Learn about the prerequisites for the Prisma Access Agent, including the supported OS versions, the minimum supported version of Prisma Access, and the supported NGFW versions. Learn about using Cloud Identity Engine for user authentication.

You can also check the prerequisites for the deployment you're using.

For Prisma Access Agent deployments on Prisma Access, be sure to:

Purchase a valid Prisma Access license with a Mobile User license subscription.
Activate Prisma Access and claim the licenses that you purchased.
Set up Prisma Access.

You will also need to activate the licenses for Strata Logging Service and Cloud Identity Engine.

For Prisma Access Agent licensing and activation on NGFW, review the information in NGFW Support for Prisma Access Agent.

What Prisma Access Versions Are Supported for Prisma Access Agent

The Prisma Access Agent can coexist with the GlobalProtect™ app on a Prisma Access tenant (instance).

The following minimum Prisma Access and Prisma Access data plane versions are required:

Prisma Access Agent Version	Prisma Access Version	Data Plane Version
25.7	5.1 Preferred or Innovation Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.6.1	5.1 Preferred or Innovation Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.4.0.29	5.1 Preferred or Innovation	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.3.0.43	5.1 Preferred or Innovation	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.1.0.14	5.1 Preferred or Innovation	PAN-OS 11.2

For coexistence tenants, be sure to configure GlobalProtect, including the GlobalProtect portal, before you configure the Prisma Access Agent.

What PAN-OS Versions Are Supported for Prisma Access Agent

The following PAN-OS versions are supported for Prisma Access or NGFW deployments:

Prisma Access Agent Version	PAN-OS Version
25.7	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.
25.6.1	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.
25.4.0.29	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.3.0.43	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.1.0.14	PAN-OS 11.2

What NGFWs Are Supported for Prisma Access Agent

The following are required for Prisma Access Agent deployments on NGFW:

Prisma Access Agent license for NGFW deployments

PAN-OS versions:

Prisma Access Agent Version	PAN-OS Version
25.7	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.
25.6.1	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.
25.4.0.29	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.3.0.43	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and later 10.2 versions
25.1.0.14	PAN-OS 11.2

What OS Versions Are Supported for the Prisma Access Agent App

Review the supported operating system versions for the Prisma Access Agent.

The Prisma Access Agent is supported on devices that run the following operating systems:

Operating System	Version	Platform	First Supported Prisma Access Agent Release
Android	Android OS 10 and later	N/A	25.3
iOS	iOS 16 and later	N/A	25.3
macOS	macOS 14 and later	Mac x86_64 Mac ARM (M*)	25.1
Windows	Windows 10 version 2004 and later	Windows x86 Windows x86_64	25.1
Ubuntu	22.04 and 24.04	x86_64 and ARM64	25.7
Fedora	41 and 42	x86_64 and ARM64	25.7
Arch Linux	Rolling release	x86_64 and ARM64	25.7

For desktop operating systems such as macOS and Windows, you can install the Prisma Access Agent on an endpoint that already has the GlobalProtect app installed. The end users can switch between the Prisma Access Agent and GlobalProtect app.