>
    Install the Prisma Access Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Configure Dynamic Privilege Access Settings
    5. Use the Prisma Access Agent to Access Your Projects
    6. Install the Prisma Access Agent
    Download PDF
    Prisma Access

    Install the Prisma Access Agent

    Table of Contents

    Install the Prisma Access Agent

    Learn how to manually install the Prisma Access Agent on your device.
    Where Can I Use This?What Do I Need?
    • Prisma Access Agent
    • macOS 12 or later desktop devices or Windows 10 version 2024 or later or Windows 11 desktop devices with admin privileges
    • Internet access
    If your administrator did not push the Prisma Access Agent to your device, you can manually install the Prisma Access Agent on your macOS or Windows device.
    The Prisma Access Agent and GlobalProtect app can coexist on the same device, but only one of them can connect to Prisma Access. If the GlobalProtect app is also installed and enabled on your device, the Prisma Access Agent installation will automatically disable the GlobalProtect app. To use the GlobalProtect app after installing the Prisma Access Agent, you will need to switch to the GlobalProtect app.

    Install the Prisma Access Agent (macOS)

    Learn how to manually install the Prisma Access Agent on a macOS device. You can also learn how to manually uninstall the Prisma Access Agent on macOS.
    To manually install the Prisma Access Agent on your macOS device:
    1. Obtain the Prisma Access Agent package that your administrator provided to you. The package name is in the following format:
      PrismaAccessAgentInstaller_<version>.pkg
    2. In your Downloads folder (or wherever you placed the installation package), open the installation package and follow the prompts to install the Prisma Access Agent.
      1. From the installer, click Continue.
      2. Select the folder for the installation of the Prisma Access Agent and click Continue.
      3. Review the information in the Installation Type page and click Install.
      4. When prompted, enter your User Name and Password, and then click Install Software to begin the installation.
        Alternatively, you can use Touch ID (if it's enabled) to complete this step.
      5. When prompted to allow the installer to access files in the folder where you downloaded the installation package, click OK.
      6. By default, macOS blocks the Prisma Access Agent system extensions. The system or network extensions appear if your administrator configured the Prisma Access Agent with traffic forwarding rules for:
        • Split tunneling—Directs network traffic through or outside of the Prisma Access connection.
        • Split DNS—Directs DNS queries for applications and resources through Prisma Access or outside of Prisma Access in addition to network traffic.
        For the Prisma Access Agent to work, you need to enable the system extensions:
        1. Click Open System Settings.
        2. In the Privacy & Security window, click Details for Some system software requires your attention before it can be used.
        3. Enable both PASrv.app apps and click OK.
      7. If your administrator enabled the feature to enforce Prisma Access connections for network access, you will be prompted to add a configuration to filter network content. To proceed, click Allow.
        After you allow this, the Prisma Access Agent will filter and monitor your network connections for security purposes.
      8. When the installation is complete, Close the installer.
      9. If your administrator configured the agent to install the Autonomous DEM agent along with the Prisma Access Agent, click OK so that you won't be prompted again.
      10. Click the Prisma Access Agent notifications pop-up to open the Notifications preferences window.
    3. If prompted, enable Prisma Access Agent notifications.
      When the Prisma Access Agent notifications pop-up appears on your desktop, move your cursor over the pop-up and select OptionsAllow.
    4. For the Prisma Access Agent to access data in the Safari browser, you must grant full disk access to the Security Extension and the Prisma Access Agent.
      1. From macOS, select System SettingsPrivacy & SecurityFull Disk Access. Enable Prisma Access Agent and securityExtension from the list of apps.
      2. When prompted, Quit & Reopen the Prisma Access Agent for the changes to take effect.

    Uninstall the Prisma Access Agent (macOS)

    You can uninstall the Prisma Access Agent manually if you no longer need to use it. Keep in mind that by uninstalling the agent, you will no longer have access to your corporate network, and your endpoint won't be protected by your organization's security policies.
    Before you begin, if the administrator enabled the anti-tamper feature for the Prisma Access Agent, you must obtain the anti-tamper unlock password from the administrator. To uninstall the agent, you must have elevated administrative rights.
    Complete the following steps to uninstall the Prisma Access Agent from the command-line interface.
    1. Open a Terminal window and issue the following command:
      sudo /Applications/Prisma\ Access\ Agent.app/Contents/Helpers/uninstaller
    2. Enter the admin password when prompted.
    3. If prompted for the supervisor password, enter the anti-tamper unlock password. Otherwise, press Enter to begin the uninstallation.
      The Prisma Access Agent and its extensions will be removed.

    Install the Prisma Access Agent (Windows)

    Learn how to manually install the Prisma Access Agent on your Windows device. You can also learn how to manually uninstall the Prisma Access Agent on Windows.
    To manually install the Prisma Access Agent on your Windows device.
    1. Obtain the Prisma Access Agent package that your administrator provided to you. The package name is in the following format:
      PrismaAccessAgent_x64_<version>.msi
    2. In your Downloads folder (or wherever you placed the installation package), double-click the installation package icon and follow the prompts to install the Prisma Access Agent.
      1. When the setup wizard appears, click Next to continue.
      2. Review the end-user license agreement, select I accept the terms in the License Agreement, and click Next.
      3. Click Install to begin the installation.
      4. When prompted to allow this app to make changes to your device, click Yes.
      5. When the installation is complete, click Finish.
      6. If your administrator configured the agent to install the Autonomous DEM agent along with the Prisma Access Agent, click OK so that you won't be prompted again.

    Uninstall the Prisma Access Agent (Windows)

    You can uninstall the Prisma Access Agent manually if you no longer need to use it. Keep in mind that by uninstalling the agent, you will no longer have access to your corporate network, and your endpoint won't be protected by your organization's security policies.
    Before you begin, if the anti-tamper feature is enabled for the Prisma Access Agent, you must obtain the anti-tamper unlock password from the administrator. To uninstall the agent, you must have administrator privileges.
    Complete the following steps to uninstall the Prisma Access Agent:
    1. Disable the Prisma Access Agent.
      1. Run the following command in a Command Prompt window:
        C:/Program Files/Palo Alto\ Networks/Prisma Access Agent/PACli.exe" protect disable
      2. If prompted for the supervisor password, enter the anti-tamper unlock password.
    2. Uninstall the Prisma Access Agent from Settings.
      • On Windows 11:
        1. Open the Start menu.
        2. Select SettingsAppsInstalled Apps.
        3. Scroll to Prisma Access Agent.
        4. Select More OptionsUninstall.
        5. When prompted to continue with the uninstall, click Yes.
      • On Windows 10:
        1. Open the Start menu.
        2. Select SettingsAppsApps & Features.
        3. Scroll to Prisma Access Agent.
        4. Select MoreUninstall.
        5. When prompted to continue with the uninstall, click Yes.

    © 2025 Palo Alto Networks, Inc. All rights reserved.