Mobile user deployments in GlobalProtect® often require security teams to manage a large, constantly changing set of public egress, gateway, and network load balancer IP addresses. Maintaining an accurate allow-list for these addresses is complex, leading to administrative overhead and potential disruptions when scaling events or new Prisma® Access locations introduce new IP addresses.

IP Optimization solves this challenge by implementing architectural enhancements that significantly reduce the total number of IP addresses required in your deployment. By managing fewer public IP addresses, you simplify your administrative allow-listing workflows, improve the resiliency of your remote access architecture, and enable faster, more efficient onboarding of new Prisma® Access tenants. This feature focuses purely on improving network efficiency and simplifies operations so you can focus on security outcomes.

It's a best practice to retrieve the new egress, gateway, and network load balancer IP addresses that Prisma Access assigns and add them to an allow list in your network to avoid SaaS application or corporate firewall disruption. This can result in a situation where you're managing a large number of IP addresses. IP Optimization reduces the number of IP addresses you have to manage.