: What’s New in Strata Multitenant Cloud Manager
Focus
Focus

What’s New in Strata Multitenant Cloud Manager

Table of Contents

What’s New in Strata Multitenant Cloud Manager

Review new features and behaviors in Strata Multitenant Cloud Manager.
Here’s what’s new in Strata Multitenant Cloud Manager. These are the features we’re currently working on that are specific to multitenant monitoring, services, and device management. You can also check what’s new in the NetSec platform.

What's New in November 2025

Prisma SASE App for ServiceNow

The Prisma SASE App is a ServiceNow certified app which helps customers who have standardized on ServiceNow as their automation and ITSM platform to configure and integrate with Prisma SASE accelerating time to value.
This integration delivers significant value for both enterprise customers and Managed Service Providers (MSPs), bridging the gap between network security operations and IT service management for faster incident response, consistent configuration management, and greater operational efficiency.
Key Capabilities and Benefits
The application streamlines operations and enhances visibility through several core modules:
  • Unified Management and Simplified Operations: Manage Prisma SASE infrastructure, incident configuration, and log forwarding directly from ServiceNow, significantly reducing operational complexity. MSPs can leverage Multi-Tenant Support to manage multiple customer domains with isolated data views.
  • Accelerated Deployment with Automated Workflows: The app includes a dedicated Automated Workflows module to minimize manual setup and R&D effort.
    • It automates Day 1 to Day N workflows across Prisma SASE tenants.
    • Configuration and lifecycle management tasks—such as onboarding tenants, configuring infrastructure, and setting up ZTNA connectors—can be executed using either intuitive UI forms or JSON-based templates.
    • Each workflow follows an approval process and includes detailed execution logs for audit and tracking.
  • Enhanced Visibility and Control: Gain a consolidated, end-to-end view of Prisma SASE incidents and infrastructure status.
    • Incident Management provides centralized visibility, automatically creating ServiceNow incidents from Prisma SASE alerts.
    • Dashboards and Visibility offer real-time insights into threat trends, application usage, license utilization, and tenant resources.
  • Streamlined Support: Users can raise and track Customer Support Ticketing (CSP) tickets directly from the app, with the option to correlate tickets to existing incidents for efficient troubleshooting.

Service Provider Interconnect with Non-IPsec

The Service Provider Interconnect (SPI) feature, formerly known as Service Provider Backbone (Cleanpipe), has been transformed to support native IP ingress and high-bandwidth connectivity, enabling service providers to deliver Prisma Access services more efficiently. With support for up to 20 Gbps per tenant and 400 Gbps per interconnect, SPI eliminates IPsec tunnel overhead and enhances throughput and scalability for large enterprise and MPLS deployments. It also unlocks the complete Prisma Access feature set—including ZTNA, CASB, and IoT Security—while maintaining strict multi-tenant isolation and offering flexible egress options through either the service provider’s network or Prisma Access-managed points.
Guided Configuration Workflow
The new Configuration Center provides a guided workflow that assists administrators in the end-to-end configuration of interconnects. The workflow covers all key stages, including ingress configuration involving cloud service provider setup, interconnect configuration, VLAN and IP pool configuration, and egress path definition. This guided process simplifies complex setup tasks and ensures accuracy and consistency across all interconnect deployments.
Visibility and Monitoring Enhancements
Management and monitoring interfaces are enhanced to offer a unified, centralized experience across all interconnects and associated tenants. You can:
  • View interconnect type, operational status, and capacity utilization at a glance.
  • Access detailed per-tenant insights on VLAN health, traffic usage, and routing states.

Prisma SASE 5G Advanced Monitoring

The Prisma 5G SASE feature has been enhanced to deliver deeper monitoring, richer observability, and a more streamlined configuration experience for both RADIUS and API-based integrations. The configuration workflow is also enhanced and combined with the Service Provider Interconnect (SPI) workflow, enabling administrators to configure and monitor 5G and interconnect environments seamlessly from a unified interface.
Key Enhancements
Unified Configuration Workflow
  • Administrators can define the connection type (RADIUS or API) during setup.
  • Enables end-to-end configuration and monitoring across both 5G and SPI environments.
Enhanced 5G SASE Monitoring
  • Existing monitoring capabilities are extended with dynamic metrics that adjust automatically based on the selected integration type.
  • Provides detailed proxy and API usage metrics, including:
    • Active, added, and cleared mappings.
    • Connection and processing status for each interface.
New UE Mapping Tab
  • Introduced within the SASE Monitoring feature to deliver comprehensive device-level visibility.
  • Supports search and filter options for IMSI, IMEI, IP address, tenant, and region.
  • Features a simplified UE Metrics Trend widget to track 5G registration and unknown IP trends, enabling quick analysis of user activity and connection patterns.

What's New in September 2025

Flexible Multitenant License Allocation

Administrators can now increase or decrease license quantities allocated to tenants after activation, giving them greater flexibility to manage licenses as organizational needs evolve.
This capability offers the following benefits:
  • Reallocation for New Tenants- If the administrator initially activate a tenant using the full allocated quantity of a license and later encounter a change in business requirements or a new operational need that requires a separate tenant, they can reduce the license quantity assigned to the original tenant. This reduction frees up capacity in the license pool, which administrators can then allocate to activate the new tenant, ensuring that they distribute resources efficiently to meet evolving organizational demands.
  • Post-Activation Readjustment-After activation, license usage often shifts as business needs evolve or consumption patterns change. Administrators can evaluate historical usage and redistribute licenses across tenants to ensure allocations match actual demand. For example, they can reduce license quantities in one tenant with low consumption and reassign that capacity to another tenant that requires more resources. This ongoing flexibility enables enterprises and service providers to maximize license efficiency and adapt quickly to business priorities.

What's New in February 2025

Prisma SASE 5G

Prisma SASE 5G extends comprehensive zero-trust security to enterprise 5G deployments.
Prisma SASE 5G feature integrates zero-trust security with 5G networks, enabling service providers to offer comprehensive SASE services for 5G-connected devices without the complexity of agents or inline hardware. This innovative approach combines Palo Alto Networks' proven Prisma Access with your 5G infrastructure, providing agentless authentication, flexible traffic routing, and intuitive multi-tenant management. By bridging the gap between 5G authentication and SASE policy rules, Prisma Access lets enterprises embrace 5G technology securely and at scale. With support for all SASE use cases, robust monitoring, and integration with existing Prisma Access capabilities, Prisma SASE 5G is the key to unlocking the full potential of enterprise mobility in the 5G era.

What's New in September 2024

Application Monitoring Update

The Strata Multitenant Cloud Manager enables managed security service providers (MSSP) or distributed enterprise customers of to get a holistic view of the application landscape for all tenants. Depending on your license, you can monitor application activity to get visibility into the Prisma Access applications along with information on data usage, incidents, and user experience of the applications.
If you have an Autonomous Digital Experience Management (ADEM) license, now you have access to features such as experience scores, plus the single tenant view for monitored applications in Strata Cloud Manager. AI-Powered ADEM is a service that provides native end-to-end visibility and performance metrics for application traffic in your environment. However, usage data is displayed for applications whether an ADEM license is enabled or not. This means that you can still access essential information about your applications, even without the advanced features provided by ADEM.
The application monitoring display is enhanced with the introduction of a new chart view and an updated table view, making it easier for you to analyze and interpret the information presented for parent and child tenants. It's not an aggregated view of the total usage from the perspective of the parent tenant. Access the Strata Multitenant Cloud Manager and select MonitorApplications.

What's New in May 2024

Enhanced Tenant Selector

The tenant selector persistently shows on the left for ease of switching between tenants, and to give context on where you are within a hierarchy.

Bulk Configuration

The Strata Multitenant Cloud Manager enables managed security service providers (MSSP) or distributed enterprise customers of Prisma Access to define and enforce global security policies in all or some of their child tenants. You would use this to create repeatable common configurations that can be applied to many tenants, while allowing for granular customization of configurations at the individual tenants for local tenant admins. Bulk configuration management is only supported for Cloud managed tenants. Panorama managed tenants are not supported as part of this feature. This feature is available in Strata Multitenant Cloud ManagerManageBulk Configuration.

What's New in March 2024

Service Provider IP Address Pools

You can now configure, view, and monitor Service Provider IP address pools to leverage your own IP addresses for Prisma Access egress traffic instead of using the egress through public cloud providers.

Multitenant Notifications

In a multitenant hierarchy, the notifications provide you with a consolidated view of the Strata Cloud Manager announcements and Prisma Access dataplane upgrade info that you would otherwise see in various places throughout the single tenant environment. The aggregated notifications prompt you to take necessary actions or help you to make informed decisions about all the tenants in your hierarchy.
If you're a managed security service provider (MSSP) or distributed enterprise with a multitenant hierarchy, you can manage notification profiles for all the tenants in your hierarchy. You can also configure to receive notifications via email or webhook.

What's New in February 2024

From within Strata Cloud Manager, the Prisma SASE Multitenant Portal is renamed to Strata Multitenant Cloud Manager.
The application tile name is also changed on the tenant view of the hub.

What's New in December 2023

The Prisma SASE Multitenant portal is supported as part of FedRAMP High "In Process" certification. It is available from the original support account view of the hub Prisma SASE Platform button .
Also available from sase.paloaltonetworks.com/msp/dashboard Tenants and Servicesyour tenantAggregate ViewsPrisma SASE Multitenant Portal.

What's New in September 2023

The following new items were released in September 2023.
New Features in September 2023
ASC Partner PortalThe Authorized Support Center (ASC) Partner Portal docs are moved to the LIVEcommunity.
SP connection changeWhen adding a service provider (SP) connection to a SP backbone, the option is removed for defining edge availability.

What's New in August 2023

The following new items were released in August 2023.
New Features in August 2023
IncidentsIncidents is replacing Alerts & Alarms. The Incidents page includes Prisma Access incidents and Prisma SD-WAN Incidents.
First time setup for Prisma AccessAfter activating a Prisma Access license, the First Time Setup experience is revised. From Prisma Access SummaryMap View, select Get Started and you are automatically directed to Manage Services to complete your setup.

What's New in June 2023

The following new items were released in June 2023.
New Features in June 2023
Strata Cloud ManagerDepending on your licensed products, and if you have received information about the migration of your tenant, you might begin to manage and monitor your network and security infrastructure through Strata Cloud Manager. You still use the same Strata Multitenant Cloud Manager button for aggregated monitoring and device management across all your multitenant hierarchy, but you might be redirected from https://sase.paloaltonetworks.com/msp/dashboard to a different URL, though it still takes you to /msp/dashboard).
Upgrade page enhancements
The MonitorUpgrades now contains new information about tenant upgrade status. The upgrade page includes new items such as: next upgrade location, next upgrade date, next upgrade window, and upgrade version.
Prisma Access Summary Dashboard Map View
The Prisma Access Summary Dashboard now contains an additional tab that displays summary information in a map view. The map view includes items such as: total tenants, total allocated users, total allocated bandwidth, service connectivity metrics, and threat metrics.
Service Provider Backbones
Depending on your license, you can now manage and monitor Service Provider Backbones to control your Prisma Access egress traffic. You need to activate your SP Backbone license before you begin managing and monitoring.
Authorized Support Center (ASC) Partner Portal
Depending on your roles in Identity and Access and Customer Support Portal, you can now use the Authorized Support Center (ASC) Partner Portal. The ASC Partner Portal provides dashboards with relevant tools and data to enable ASC partners to address their L1 and L2 cloud-managed SASE issues.
Bulk Config
Depending on your license, you can now Manage Bulk Configurations to create repeatable, common configurations that can be applied to many Prisma Access tenants at once.

What’s New in October 2022

The following new items were released in October 2022.
New Features in October 2022
Virtual ION Devices
Depending on your license, you can now allocate Virtual ION devices and revoke virtual ION devices for Prisma SD-WAN.

What’s New in September 2022

The following new items were released in September 2022.
New Features in September 2022
Service Connectivity
Depending on your license, you can monitor service connectivity reports across your Prisma Access tenants and view child tenant service connectivity details.

What’s New in August 2022

The following new items were released in August 2022.
New Features in August 2022
Common Services Docs
Documentation for license activation, tenant management, and identity and access management is now relocated to Common Services.

What’s New in July 2022

The following new items were released in July 2022.
New Features in July 2022
Prisma Access Shared Licensing
You can now allocate an entire license to one tenant or you can allocate portions of the license to multiple tenants. For example, activate a and share a .
Prisma SD-WAN and Prisma SASE Licenses
You can now activate licenses for Prisma SD-WAN Prisma SASE on your tenants.
SASE Summary Dashboard
Depending on your license, the Summary screen now contains a SASE Summary Dashboard that displays the high-level summarized status of all your SASE tenants.
Prisma SD-WAN Summary Dashboard
Depending on your license, the Summary screen now contains a Prisma SD-WAN that displays the high-level summarized status of all your Prisma SD-WAN tenants.
Manage and Monitor Prisma SD-WAN Devices
Depending on your license, you can now manage and monitor .
Monitor Branches
Depending on your license, you can now monitor .

What’s New in June 2022

The following new items were released in June 2022.
New Features in June 2022
Shortcut to single tenant dashboard
When monitoring tenant threats or monitoring tenant applications, you can now click a tenant name from the monitoring table as a shortcut to viewing the child tenant details, rather than going directly to the Prisma Access activity dashboards.
Top-level TSG limit
When adding tenants, there are now tenant hierarchy limits for how many used and unused Tenant Service Groups (TSGs) you can add.
Customer Support Contact
When you add a tenant, you can now specify a customer support contact person’s name, email, or phone number.

What’s New in May 2022

The following new items were released in May 2022.
New Features in May 2022
Region Display
Aggregate and summary dashboards now display the tenant region in the filter bar for your convenience, such as in the Prisma Access Summary Dashboard.
Tenant Service Group ID (TSG ID)
The TSG ID is now visible in various locations in the UI, such as in Access Products from Tenant Management.
Default TSG ID
The default TSG ID is now the top-level parent tenant with the lowest TSG ID by default, for example in what is a tenant?.