Your Prisma Access License
Focus
Focus
Prisma Access

Your Prisma Access License

Table of Contents

Your
Prisma Access
License

Learn about
Prisma Access
licenses.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Cloud Management)
  • Prisma Access (Panorama Managed)
  • Prisma Access
    license
Prisma Access
offers a licensing model that allows you to implement and use the capabilities of
Prisma Access
aligned to your business needs in a way that delivers the fastest return on investment. Whether your applications are migrating to the cloud, your users are working from anywhere, or if you are looking to gain operational efficiencies,
Prisma Access
offers the relevant type of license for your deployment.
You can choose from the following license editions (more details are in the
Prisma Access
):
  • Business
  • Business Premium
  • Zero Trust Network Access (ZTNA) Secure Internet Gateway (SIG)
  • Enterprise
Your
Prisma Access
license edition determines the security capabilities that are available to you. If you use any capability in security rules or profiles that is unsupported based on your license type,
Prisma Access
removes those configurations and those capabilities are not enforced in your
Prisma Access
tenants until you update
Prisma Access
with a license edition that supports those capabilities. To find the capabilities included with your license, refer to the
Prisma Access
.
All license editions are available for Local and Worldwide
Prisma Access
locations. When you purchase a license with Worldwide locations, you can deploy
Prisma Access
in all
Prisma Access
locations. When you purchase a license with Local locations, you can select up to five
Prisma Access
locations.
Prisma Access
uses
units
in licenses, and uses the following definitions for a unit:
  • For mobile user deployments, a
    unit
    is defined as one mobile user. When you assign units in
    Prisma Access
    from your Mobile users license, each unit allows a mobile user to utilize
    Prisma Access
    —GlobalProtect, Prisma Access—Explicit Proxy, or both GlobalProtect and Explicit Proxy.
  • For remote network and Clean Pipe deployments, a
    unit
    is defined as 1 Mbps of bandwidth.
When a
Prisma Access
license expires, you can still use the service and collect logs for 15 days after license expiration. You cannot make changes to configuration.
Prisma Access
shuts down its instances 15 days after license expiration and completely deletes the instances and tenants 30 days after license expiration.

License Enforcement for
Prisma Access
Mobile User Deployments

Learn how mobile user (GlobalProtect) licenses are counted in Prisma Access.
Prisma Access
uses these enforcement policies for mobile user licenses:
  • Though there is no strict policing of the mobile user count, the service does track the number of unique users over the last 90 days to ensure that you have purchased the proper license tier for your user base, and stricter policing of user count may be enforced if continued overages occur.
    From Prisma Access 5.0.1, the license enforcement policy applies for 30 days instead of 90 days.
  • A
    Prisma Access
    Mobile User license allows you to use both GlobalProtect and explicit proxy connect methods. With a single Mobile User license, the user can connect with GlobalProtect, Explicit Proxy, or both.
  • If you use
    Prisma Access
    for users—GlobalProtect, the GlobalProtect app is required on each supported endpoint. The GlobalProtect app is not required for Mobile Users—Explicit Proxy deployments.

Other Required
Prisma Access
Licenses (Panorama)

See the other licenses that are required for
Prisma Access
.
In addition to the
Prisma Access
licenses, in order to run the service you must also have the following licensed components:
  • Panorama
    —You deploy and manage
    Prisma Access
    using the Cloud Services plugin for Panorama. In order to use this plugin, you must have Panorama with a valid support license. See the Palo Alto Networks Compatibility Matrix for the Panorama versions that are supported with the Cloud Services plugin. When you license the
    Prisma Access
    components, you must tie the auth code to a licensed Panorama serial number.
  • Cortex Data Lake
    —The
    Prisma Access
    infrastructure forwards all logs to Cortex Data Lake. You can view the
    Prisma Access
    logs, ACC, and reports directly from Panorama for an aggregated view into your remote network and mobile user traffic. To enable logging for
    Prisma Access
    , you must purchase a Cortex Data Lake license.

Other Licenses to Use With
Prisma Access (Cloud Management)

Cloud services that you want to integrate with
Prisma Access
must be deployed in the same region as
Prisma Access
. You can integrate these cloud services with
Prisma Access
when you first activate
Prisma Access (Cloud Management)
, or anytime afterward.
  • Cortex Data Lake
    (Required)
    Prisma Access
    logs are stored in Cortex Data Lake, and so
    Prisma Access
    requires you to also have a Cortex Data Lake license. It’s a good idea to activate Cortex Data Lake before you begin activating
    Prisma Access
    . If you try to activate
    Prisma Access
    without first activating Cortex Data Lake,
    Prisma Access
    will guide you to activate Cortex Data Lake before allowing you to continue
    Prisma Access
    activation. Your Cortex Data Lake instance and
    Prisma Access
    instance must be deployed in the same region.
  • Cloud Identity Engine (Directory Sync)
    —Cloud Identity Engine gives
    Prisma Access
    read-only access to your Active Directory information, so that you can easily set up and manage security and decryption policies for users and groups. Cloud Identity Engine is free and does not require a license to get started.
  • SaaS Security API
    —Integrate SaaS Security API with
    Prisma Access
    for Clientless VPN and authentication support.
  • Remote Browser Isolation (RBI)
    —Integrate RBI with
    Prisma Access
    to provide a browsing environment that isolates all malware, including zero-day attacks that result from browsing and web activity, away from your end users and your network.

Prisma Access
Add-On Licenses

Learn about the add-on licenses that are provided by
Prisma Access
.
You can add the following capabilities to use with
Prisma Access
as an add-on license:

Recommended For You