>
    Strata Copilot
    Configure Coffee Shop Deployment Policies
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Stacked Policies
    5. Simplify Coffee Shop Deployment Policies for Prisma Access Traffic
    6. Configure Coffee Shop Deployment Policies
    Download PDF
    Prisma SD-WAN

    Configure Coffee Shop Deployment Policies

    Table of Contents

    Configure Coffee Shop Deployment Policies

    Learn how to configure coffee shop deployment policies.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma Access
    • Prisma SD-WAN
    As an administrator, you have the flexibility to create custom Path, Quality of Service (QoS), and Security policy sets. When building these custom rules, you do not need to manually input IPs. You can select the automatically generated, dynamically updated Prisma Access MU and EP prefix lists to define your traffic routing and security rules.
    1. Select ConfigurationPrisma SD-WANPoliciesPathPath StacksAdvanced.
    2. Select the path stack currently bound to your branch site.
    3. Attach the Default Path Coffeeshop Simple Stack Policy Set to the stack.
      The Default Path Coffeeshop Simple Stack Policy Set is an automatically generated, default path policy set created on the Prisma SD-WAN controller.
    4. Verify that the Prisma Access Mobile User Default and Prisma Access Explicit Proxy Default rules are enabled.
    5. If needed, select a rule and choose Enable to activate it.
      You can enable or disable the rule to activate or deactivate the policy. If the rule is disabled, the rule will have disabled added as a suffix to its name.
    6. Optional Adjust the priority order of the rules to position them above your existing path policy rules.
    7. Save your changes.
      Mobile User and Explicit Proxy traffic at the branch site now route directly to the internet. The prefix list updates automatically as Prisma Access gateways scale.

    © 2026 Palo Alto Networks, Inc. All rights reserved.