Use Secure Agentless Access
Focus
Focus
Prisma Access

Use Secure Agentless Access

Table of Contents

Use Secure Agentless Access

Learn how your users can access and use the Secure Agentless Access portal.
Where Can I Use This?What Do I Need?
  • Secure Agentless Access (SAA) portal
  • A web browser that supports HTML5
  • SAA credentials
Your users will log in to the Secure Agentless Access (SAA) portal to access their SAA apps. You will need to send the SAA portal URL to your users. You can obtain the portal URL from the SAA Portal page.
SAA automatically creates the portal when you enable SAA and configure the portal domain name (either a subdomain or a custom domain). All activities performed in the SAA portal take place after the user authenticates and logs in to the portal. For authentication, SAA uses the Cloud Identity Engine.
Your user can perform the following actions in the SAA portal:
  • Log in to the SAA portal—To access the SAA portal, your end users must access the portal URL that you sent to them. Whenever they visit the SAA portal, they are first authenticated using the Cloud Identity Engine.
    The following is the login sequence that takes place:
    1. The user visits the portal by entering the portal URL in their web browser. For example: example.panwpra.com
    2. The users are authenticated using the Cloud Identity Engine.
  • View active connections—The user can view the list of apps they are actively connected to. They can view the following data:
    • Connection Name—The name of the app they are connected to
    • App Type—The connection protocol used (RDP, SSH, or VNC)
    • Started At—When they last connected to the app
    • Last Active—Whether the connection is still active by showing when they last interacted with the app
    • User Agent—The browser used to access the app
  • Access an app from the Admin-Defined Apps or User-Defined Apps sections—The user can select Actions next to the app that they want to connect to.
    The app appears in a separate window that your user can interact with. If you did not add the app with login credentials for the target machine, the user will be prompted to enter their credentials.
    The user can also group the admin-defined apps by selecting Group ByApp Groups or Group ByApp Type. To cancel the grouping, select Group ByNone.
    To group the user-defined apps by app type, select Group ByApp Type. To cancel the grouping, select Group ByNone.
  • Disconnect an app connection—The user can click Disconnect in a connected app window, or select an active connection from the SAA portal and click Delete Selected.
  • Manually add an app—If you allow user-defined apps, the user can manually add an app.
  • Transfer files—If the associated SAA profile allows, the user can upload or download files from the remote app.
  • Log out—The user can log out of the SAA portal by clicking the user icon and selecting Log out.