>
    Strata Copilot
    Enable Prisma Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Agent
    3. Enable Prisma Agent
    Download PDF
    Prisma Agent

    Enable Prisma Agent

    Table of Contents

    Enable Prisma Agent

    Enable self-service onboarding for Prisma Agent with flexible activation, deactivation, and configuration retention for seamless deployment management.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager Managed Prisma Access
    • Prisma Access (Managed by Panorama)
    • NGFW (Managed by Panorama)
    Before you can onboard your users to Prisma Agent, you must enable Prisma Agent. After you enable Prisma Agent, you can configure the agent and push the configuration to your endpoints, and the Prisma Agents that are installed on the endpoints will be able to send traffic to the gateway.
    For Prisma Access (Managed by Panorama or Strata Cloud Manager) deployments, ensure that you have activated your Prisma Access license and set up Prisma Access.
    For Panorama Managed NGFW deployments, ensure that you have enabled Prisma Agent for NGFW deployments

    Enable Prisma Agent (Strata Cloud Manager Deployments)

    Enable the Prisma Agent in Strata Cloud Manager Managed Prisma Access deployments.
    This enablement workflow does not apply to FedRAMP or Prisma Access China tenants.
    To enable Prisma Agent in Strata Cloud Manager Managed Prisma Access deployments:
    1. Log in to Strata Cloud Manager as the administrator.
    2. Select ConfigurationNGFW and Prisma AccessConfigurationMobile Users Container.
    3. Select Mobile Users.
    4. Enable the Prisma Agent depending on the following scenarios in your Prisma Access tenant:
      • If no access agent (like Prisma Agent or GlobalProtect) has ever been enabled:
        1. Click Enable.
        2. Enable Prisma Agent and select the X to close the window.
      • If GlobalProtect has already been enabled on your tenant:
        1. Select Enable/Disable.
        2. Enable Prisma Agent and select the X to close the window.
      After you enable Prisma Agent, the Prisma Access AgentEndpoint Management navigation menu and the Endpoint Management page becomes available for monitoring and managing enrolled endpoints.
      The Access Agent Setup page (ConfigurationNGFW and Prisma AccessConfiguration ScopeAccess AgentSetup) also becomes available for configuring agent settings, forwarding profiles, and deployment options.
    5. Click Configure to configure the Prisma Agent.

    Disable Prisma Agent

    You can disable Prisma Agent if your enterprise fleet no longer uses it or you have ended your trial of Prisma Agent.
    When you disable Prisma Agent, the system preserves your configuration data, allowing you to re-enable the service with your previous settings intact. All Prisma Agent-specific pages are hidden from the navigation menu in Strata Cloud Manager.
    The Endpoint Management page is hidden for new tenants only. For existing tenants that previously enabled Prisma Agent, the Endpoint Management page remains visible.
    If GlobalProtect is also enabled in your Prisma Access tenant, disabling Prisma Agent will not affect your GlobalProtect settings.
    1. Log in to Strata Cloud Manager as the administrator.
    2. Select ConfigurationNGFW and Prisma AccessConfigurationMobile Users Container.
    3. Select Mobile Users.
    4. Disable the Prisma Agent.
      1. Select Enable/Disable.
      2. Disable the Prisma Agent.
      3. Confirm that you want to disable the Prisma Agent by clicking OK.
      4. Select the X to close the window.
    5. Select Push ConfigPush to Push the Prisma Agent Configuration.

    Enable Prisma Agent (Panorama Managed Deployments)

    Enable the Prisma Agent in Panorama Managed Prisma Access or Panorama Managed NGFW deployments.
    To enable Prisma Agent in Panorama Managed Prisma Access or Panorama Managed NGFW deployments.
    To enable Prisma Agent:
    1. Launch the Prisma Agent configuration interface.
      • For Panorama Managed Prisma Access deployments:
        1. From Panorama, select PanoramaCloud ServicesPrisma Access AgentLaunch Prisma Access Agent.
        2. Navigate to the Prisma Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
      • For Panorama Managed NGFW deployments:
        1. Log in to Strata Cloud Manager as the administrator.
        2. Navigate to the Prisma Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
    2. Enable Prisma Access Agent.
    3. Set up the Prisma Agent domain name.
      1. In the Infrastructure tab, select the Domain Name settings.
      2. Add a hostname to the Domain Name for the service that the Prisma Agent connects to. This domain name is sometimes called the server name or Endpoint Manager FQDN.
        By default, users can access the service using an FQDN based on the hostname and the epm.gpcloudservice.com domain. This FQDN will be published to the public domain name servers. You cannot change the epm.gpcloudservice.com domain.
      3. Save the domain name setting.
    4. Continue to Set Up the Infrastructure for Prisma Agents.

    Disable Prisma Agent

    You can disable Prisma Agent if your enterprise fleet no longer uses it or you have ended your trial of Prisma Agent.
    When you disable Prisma Agent, the system preserves your configuration data, allowing you to re-enable the service with your previous settings intact. During deactivation, all Prisma Agent-specific pages are hidden from the navigation menu. Disabling the agent will affect all connected agents and will deactivate agents.
    1. Launch the Prisma Agent configuration interface.
      • For Panorama Managed Prisma Access deployments:
        1. From Panorama, selecting PanoramaCloud ServicesPrisma Access AgentLaunch Prisma Access Agent.
        2. Navigate to the Prisma Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
      • For Panorama Managed NGFW deployments:
        1. Log in to Strata Cloud Manager as the administrator.
        2. Navigate to the Prisma Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
    2. In Infrastructure, select the settings icon in the Setup section.
    3. Disable Prisma Access Agent and Save your setting.
    4. Confirm that you want to disable the Prisma Agent.
    5. Select Push ConfigPush to Push the Prisma Agent Configuration.

    © 2026 Palo Alto Networks, Inc. All rights reserved.