>
    Strata Copilot
    Migrate from GlobalProtect to Prisma Agent (Panorama)
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Agent
    3. Migrate from GlobalProtect to Prisma Agent
    4. Migrate from GlobalProtect to Prisma Agent (Panorama)
    Download PDF
    Prisma Agent

    Migrate from GlobalProtect to Prisma Agent (Panorama)

    Table of Contents

    Migrate from GlobalProtect to Prisma Agent (Panorama)

    Follow the steps to migrate your GlobalProtect deployment to the Prisma Agent on a tenant managed by Panorama.
    Use this section if your Prisma® Access tenant is managed using Panorama. Complete the steps in the following order to enable, configure, and deploy the Prisma Agent alongside your existing GlobalProtect deployment:
    1. Review the GlobalProtect configuration requirements for migration.
    2. Enable the Prisma Agent on your GlobalProtect tenant.
    3. Configure infrastructure settings, including the mandatory Prisma Agent Domain Name.
    4. Configure user authentication using Cloud Identity Engine.
    5. Configure agent settings, including connect method and anti-tamper protection.
    6. Configure forwarding profiles to replicate your GlobalProtect split tunnel settings.
    7. Deploy the Prisma Agent and transition from GlobalProtect.
    8. Monitor traffic, troubleshoot, and configure common use cases.

    © 2026 Palo Alto Networks, Inc. All rights reserved.