Use the Prisma Access Agent App (Managed Devices) iOS

Table of Contents

Use the Prisma Access Agent App for iOS (Unmanaged Devices)

Connect the Prisma Access Agent to a Different Location

Use the Prisma Access Agent App (Managed Devices) iOS

Use the Prisma Access Agent App on managed devices on iOS.

Where Can I Use This?	What Do I Need?
Prisma Access Agent	iOS 16 and later versions Internet access

If your iOS endpoint is managed by a mobile device management (MDM) system, your administrator may have automatically pushed the Prisma Access Agent to your endpoint and configured the agent.

Open the Prisma Access Agent app by tapping the Prisma Access Agent app icon (

).
The agent gets connected based on the connect method configured by your Prisma Access Agent administrator. Prisma Access Agent supports the following connect methods:
- Always-On
  In an Always-On configuration, Prisma Access Agent automatically connects as soon as you log in.
- On-Demand
  In an on-demand configuration, you must manually connect Prisma Access Agent through the application. Traffic is routed through the Prisma Access Agent app only after you initiate and establish the connection.
- Automatic Configuration
  - Per-App
    In a per-app configuration, your administrator can configure the managed apps that will route traffic through Prisma Access Agent. When you access the managed app, Prisma Access Agent will automatically connect and only traffic for the managed apps your administrator has configured under the configuration profile will be routed through Prisma Access Agent.
  - On-Demand Connect Rules
    In an on-demand connect rules configuration, while you can manually initiate a connection to the Prisma Access Agent, administrators can also configure Prisma Access Agent to connect automatically when you access a specific domain.
If your agent is always-on, you'll receive a notification to authenticate with your identity provider.
1. Tap the notification to proceed.
2. Enter your organization credentials to authenticate to the app:
If your agent is on-demand, manually connect to the agent.
1. Connect by clicking the lock icon.
2. Enter your organization credentials to authenticate to the app:
After authentication is complete, the connection is established and the app displays the status as Connected.
(Prisma Access Agent 25.7.0) When using Prisma Access Agents configured for per-app deployment, you will receive a notification if you connect to a network that requires captive portal authentication, such as public Wi-Fi at hotels, cafes, or airports.
1. Tap on the notification to proceed.
2. The captive portal login page will appear in the embedded browser. Enter your credentials or accept the terms of service as required by the network provider. For example:
After you connect the app, the app displays the VPN icon on the screen.
For Prisma Access Agents agents with on-demand or per-app configurations, tap Disconnect on the app when you no longer need to access the resources through Prisma Access Agent.

For Prisma Access Agents with always-on configurations, you won't be able to disconnect the agent: