Learn about how IP addresses change and how to use a
new compute location for an existing location.
| Where Can I Use
This? | What Do I Need? |
|---|
To optimize performance and improve latency,
Prisma Access can introduce new
compute locations for
locations you have already deployed as part of a plugin upgrade. When you upgrade
the plugin, the existing compute location-to-location mapping does not change, but
you can choose to take advantage of the new compute location. If you change the
compute location,
Prisma Access changes the gateway and portal IP addresses (for
mobile users) and
service endpoint addresses
(for remote networks) for the location or locations to which the new compute
location is associated. If you use allow lists in your network to provide users
access to internet resources such as SaaS applications or publicly accessible
partner applications, you need to add these new IP addresses to your allow lists.
To
upgrade to a new compute location after it becomes available, complete
the following task.
Since you need to allow time to delete
and add the existing location and change your allow lists (for mobile
users) or peer IPSec tunnel IP address (for remote network deployments),
Palo Alto Networks recommends that you schedule a compute location change
during a maintenance window or during off-peak hours.
To reduce down time for mobile user deployments, use the
API to pre-allocate the new mobile user
gateway and portal IP addresses before you perform these steps.
