Authorize Mobile Users in Prisma Access

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Activation & Onboarding
Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Add Microsoft Entra ID

Secure AIP Labeled Files with Enterprise DLP

Authorize Mobile Users in Prisma Access

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)	Prisma Access license Minimum Required GlobalProtect Client Version: 6.0 or a later version

If you are using an explicit proxy, ensure to set it up for mobile users. After adding your Microsoft Entra ID (formerly Azure Active Directory (Azure AD)) in the Cloud Identity Engine, authorize users in Prisma Access.

In Prisma Access, verify if it is connected to Cloud Identity Engine, and that Cloud Identity Engine is sharing directory information with Prisma Access.
1. Select ManageConfigurationIdentity ServicesCloud Identity Engine.
2. Confirm the directory details you added in the Cloud Identity Engine app for the integration.
Mark the incoming traffic based on the source.
1. Select ManageConfigurationSecurity ServicesSecurity Policy.
2. (For GlobalProtect mobile users and remote networks only) Add Rule or edit an existing security policy rule for GlobalProtect mobile users or Remote Networks.
3. (For explicit proxy mobile users only) Add Rule or edit an existing security policy rule for Explicit Proxy mobile users.
4. Add users or user groups from the Microsoft Entra ID to your security policy rule and save the policy.
  
  View the users and user groups you added under the Source column.
Push the configurations.
Verify the user or user group mapping.
- For GlobalProtect mobile users only
1. In Prisma Access, select Activity InsightsInsightsUsers.
  
  View details about mobile users and devices connected for a time range you select.
- For explicit proxy mobile users only
1. Copy the PAC file URL to the endpoint.
  
  Go to ManageService SetupExplicit ProxyInfrastructure Settings to view the PAC file URL.
2. Access a URL that requires authorization.
3. Enter the credentials.
4. In Prisma Access, view the user mapping information by running the show user ip-user-mapping all command.
5. (Optional) In Prisma Access, select Activity InsightsInsightsUsers.
  
  View details about mobile users connected for a time range you select.