Filter

Expand All | Collapse All

FedRAMP Docs

Prisma SASE
Autonomous DEM

Focus

FedRAMP

Prisma SASE FedRAMP Moderate and High "In Process" Support

Table of Contents

Prisma SASE FedRAMP Moderate and High "In Process" Requirements

Prisma SASE FedRAMP Moderate and High "In Process" Locations

Prisma SASE FedRAMP Moderate and High "In Process" Support

Learn which apps and features Prisma SASE FedRAMP Moderate and High "In Process" environments support for use.

Prisma SASE FedRAMP Moderate and High "In Process" environments support the following apps and features for use.

Prisma SASE FedRAMP Moderate Support

The following apps and features are supported for use in a FedRAMP Moderate environment:

Cloud-managed Prisma Access, including:
- Insights
- Autonomous DEM
- Multitenant Platform
- Advanced WildFire Cloud (full detections)
- CDSS add-on services, including:
Panorama-managed Prisma Access
- Activity
- Autonomous DEM
- CDSS add-on services, including:
  - Advanced WildFire Cloud (full detections)
  - App-ID Cloud Engine
  - Cloud Identity Engine
  - Enterprise DLP
  - SaaS Security API
  - SaaS/DLP Inline
  - SaaS Security Posture Management (SSPM)
- FIPS dependencies: FIPS Mode is recommended to be enabled for customers of on-premise Panorama Management and computers using the GlobalProtect Agent
- Insights
Prisma SD-WAN standalone and add-on
FIPS dependencies: FIPS Mode is recommended to be enabled for Panorama only

Prisma SASE FedRAMP High "In Process" Support

The following apps and features are supported for use in a FedRAMP High "In Process" environment.

Cloud-managed Prisma Access, including:
- Activity
- Autonomous DEM
- CDSS add-on services, including:
  - Advanced WildFire Cloud (full detections)
  - App-ID Cloud Engine
  - Cloud Identity Engine
  - Enterprise DLP
  - SaaS Security API
  - SaaS/DLP Inline
  - SaaS Security Posture Management (SSPM)
- Dedicated hub for federal
- Dedicated support environment for federal
- FIPS dependencies: FIPS Mode is recommended that endpoints have FIPS enabled
- Insights
- Multitenant Platform (Prisma Access
Panorama-managed Prisma Access
- Activity
- Autonomous DEM
- CDSS add-on services, including:
  - Advanced WildFire Cloud (full detections)
  - App-ID Cloud Engine
  - Cloud Identity Engine
  - Enterprise DLP
  - SaaS Security API
  - SaaS/DLP Inline
  - SaaS Security Posture Management (SSPM)
- Dedicated hub for federal
- Dedicated support environment for federal
- FIPS dependencies: FIPS Mode is recommended to be enabled for customers of on-premise Panorama Management and computers using the GlobalProtect Agent
- Insights
Prisma SD-WAN standalone and add-on

Customer Responsibility Matrix

Support side URL for Prisma SASE FedRAMP "In Process": support-fed.paloaltonetworks.us.


Customer Responsibilities	Implementation Status	Control Organization
Customer Responsibilities	Implemented	Service Provider System Specific	Configured by Customer (Customer System Specific)	Shared (Service Provider and Customer Responsibility	Inherited from Pre-existing Authorization
AC-2: Account Management
AC-02 (a-g), (i-k)	x	x	x	x	x
AC-02 (05)	x	x	x	x	x
CA-03: System Interconnections
CA-03 (03)	x	x	x	x
IA -02/08: Identification & Authentication: Org & Non-org Users
IA-02	x	x	x	x
IA-02 (02)	x	x	x	x	x
IA-02 (12)	x	x	x	x
IA-08	x	x	x	x
IA-08 (01-04)	x	x	x	x
IR-9: Information Spillage Response
IR-09 (a-f)	x	x	x	x
SA-04: Acquisition Process
SA-04 (10)	x	x	x	x
SC-08: Transmission Confidentiality & Integrity
SC-08	x	x	x	x	x
SC-08 (01)	x	x	x	x	x

Prisma SASE FedRAMP Moderate and High "In Process" Requirements

Prisma SASE FedRAMP Moderate and High "In Process" Locations