Deploy Prisma Agents to iOS Endpoints Using Microsoft Intune
Deploy Prisma Agents to iOS Endpoints Using Microsoft Intune
| Where Can I Use This? | What Do I Need? |
|---|
- Prisma Access (Managed by Strata Cloud Manager)
- Prisma Access (Managed by Panorama)
- NGFW (Managed by Panorama)
|
|
Microsoft Intune is a cloud-based endpoint management solution that enables you to manage
mobile endpoints from a central console. Using Microsoft Intune, you can deploy the
Prisma Agent app to managed endpoints that are enrolled with Microsoft
Intune.
Using the Microsoft Intune, you can deploy Prisma Agent to the iOS endpoints with
the following connect methods:
- Always-On
In an Always-On configuration, Prisma Agent automatically connects as soon as end users log in.
When you deploy Prisma Agent to iOS endpoints with an Always-On
profile, SAML authentication is supported by default. When your users unlock
their devices, they receive a notification to authenticate through their
configured browser. All network access remains blocked until authentication
completes, including application notifications.
- On-Demand
In an on-demand configuration, end users must
manually connect Prisma Agent through the application. Traffic is routed
through the Prisma Agent app only after the end users initiate and
establish the connection.
- Automatic Configuration
- Per-App
In a per-app configuration, you can
configure the managed apps that will route traffic through Prisma Agent. When the users access the managed app, Prisma Agent will
automatically connect and only traffic for the managed apps you have
configured under the configuration profile will be routed through Prisma Agent.
- On-Demand Connect Rules
In an on-demand connect
rules configuration, while end users can manually initiate a connection
to the Prisma Agent, you can also configure Prisma Agent
to connect automatically when end users access a specific
domain.
