Access Your Data Center Using Explicit Proxy (

Panorama

)

Configure a service connection in
Prisma Access
.
Configure DNS settings.
Configure zone mappings.
Select
Panorama
Cloud Services
Configuration
Mobile Users - Explicit Proxy
Zone Mapping
Add the zones that you will use to access your data center resources to
Trusted Zones
.
Ensure that the
Destination ZONE
in policy rules for internet-bound traffic is set to an untrust zone instead of
any
.
Failure to perform this step could result in unintended access to your data center.
Select
Policies
.
Set the
Device Group
to
Explicit_Proxy_Device_Group
.
Change the
Destination ZONE
from
any
to one of the untrust zones you configured in an earlier step.
Enable private application access.
Select
Panorama
Cloud Services
Configuration
Mobile Users - Explicit Proxy
Settings
Advanced
Enable Private Application Access
Create security policy rules for the data center resources you want to access.
Select
Policies
.
Set the
Device Group
to
Explicit_Proxy_Device_Group
.
Create security policy rules.
In rules for data center access, ensure that you use the
Trusted
zones you configured in an earlier step.