Focus

Prisma Access

Enable ZTNA Connector (Panorama)

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Release Notes
Select a Document
- 6.0 Preferred and Innovation
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Activation & Onboarding
Administration
Select a Document
- 4.0 & Later
- Prisma Access China
Integrations
Incidents & Alerts

Enable ZTNA Connector (Panorama)

Learn how to configure a ZTNA Connector in Prisma Access (Managed by Panorama).

Use the following workflow to enable ZTNA Connector in Prisma Access (Managed by Panorama).

You must define separate IP address blocks for your connectors and your applications and the blocks cannot overlap with:

Each other
The Prisma Access infrastructure subnet
The GlobalProtect IP address pool
If you are using service connections with ZTNA Connector, subnets advertised from a data center to the Prisma Access service connection using static routes or BGP

Configure the IP address blocks that Prisma Access will use internally to route traffic to the ZTNA Connector and the private apps you onboard.
- Select PanoramaCloud ServicesConfigurationService Setup and Edit the Settings.
- On the ZTNA Connector tab Add an Application IP Block.
  You can add a single Application IP Block, or multiple blocks depending on your deployment.You can also Enable Advertise Application IP Block to Remote Networks.
  Use RFC 1918 or RFC 6598 addresses. You can specify an RFC 1918 address pool during ZTNA Connector setup instead of RFC 6598. However, you can change the address pool type back to RFC 6598 after you specify RFC 1918 only for application blocks. For connector IP address blocks, you can change the address pool type only when you delete all the connectors and connector groups.
- Set the Connector IP Blocks that Prisma Access will use internally to route traffic between mobile users, remote networks and the connector VMs in your data centers.
  
  Configure the connector IP address blocks carefully. Once you have added them, you can only update or delete them after you delete all the existing connectors or connector groups.
  
  You can add a single Connector IP Block, or multiple blocks depending on your deployment.
- Click OK to save the IP address block configuration and then Commit and push the configuration.
Launch ZTNA Connector from the Cloud Services Plugin on Panorama.
- SelectPanoramaCloud ServicesZTNA Connector.
- Click Strata Cloud Manager to launch ZTNA Connector in Strata Cloud Manager on the hub.
- From Strata Cloud Manager, select SettingsZTNA Connector.
- Prisma Access begins setting up the infrastructure for the ZTNA Connector. This may take a few minutes.
- When onboarding finishes, the ZTNA Connector Overview displays.

Prisma Access Docs

Enable ZTNA Connector (Panorama)

Prisma Access Docs

Enable ZTNA Connector (Panorama)

Activation & Onboarding

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner

Translated Documents