Enable Prisma Access Agent

Table of Contents

Enable Prisma Access Agent

Enable self-service onboarding for Prisma Access Agent with flexible activation, deactivation, and 60-day data retention for seamless deployment management.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Panorama) NGFW (Managed by Panorama)	Check the prerequisites for the deployment you're using

Before you can onboard your users to Prisma Access Agent, you must enable Prisma Access Agent. After you enable Prisma Access Agent, you can configure the agent and push the configuration to your endpoints, and the Prisma Access Agents that are installed on the endpoints will be able to send traffic to the gateway.

Panorama

Enable Prisma Access Agent (Panorama Managed Deployments)

Enable the Prisma Access Agent on Panorama Managed Prisma Access or Panorama Managed NGFW deployments.

You can use the Prisma Access Agent configuration interface to enable the Prisma Access Agent on Panorama Managed Prisma Access or Panorama Managed NGFW deployments.

Before you enable Prisma Access Agent, be sure to:

(Panorama Managed Prisma Access) Activate your Panorama Manged Prisma Access license and set up Panorama Managed Prisma Access
(Panorama Managed NGFW) Enable Prisma Access Agent for NGFW Deployments

To enable Prisma Access Agent:

Launch the Prisma Access Agent configuration interface.
- For Panorama Managed Prisma Access deployments:
  1. From Panorama, selecting PanoramaCloud ServicesPrisma Access AgentLaunch Prisma Access Agent.
  2. Navigate to the Prisma Access Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
- For Panorama Managed NGFW deployments:
  1. Log in to Strata Cloud Manager as the administrator.
  2. Navigate to the Prisma Access Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
Enable Prisma Access Agent.
Set up the Prisma Access Agent domain name.
1. In the Infrastructure tab, select the Domain Name settings.
2. Add a hostname to the Domain Name for the service that the Prisma Access Agent connects to. This domain name is sometimes called the server name or Endpoint Manager FQDN.
  
  By default, users can access the service using an FQDN based on the hostname and the epm.gpcloudservice.com domain. This FQDN will be published to the public domain name servers. You cannot change the epm.gpcloudservice.com domain.
3. Save the domain name setting.
Continue to Set Up the Infrastructure for Prisma Access Agents.

Disable Prisma Access Agent

You can disable Prisma Access Agent if your enterprise fleet no longer uses it or you have ended your trial of Prisma Access Agent.

When you disable Prisma Access Agent, the system preserves your configuration data for 60 days, allowing you to re-enable the service with your previous settings intact. During deactivation, all Prisma Access Agent-specific pages are hidden from the navigation menu. Disabling the agent will affect all connected agents and will deactivate agents.

Launch the Prisma Access Agent configuration interface.
- For Panorama Managed Prisma Access deployments:
  1. From Panorama, selecting PanoramaCloud ServicesPrisma Access AgentLaunch Prisma Access Agent.
  2. Navigate to the Prisma Access Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
- For Panorama Managed NGFW deployments:
  1. Log in to Strata Cloud Manager as the administrator.
  2. Navigate to the Prisma Access Agent Setup page by selecting ConfigurationPrisma Access AgentSettings.
In Infrastructure, select the settings icon in the Setup section.
Disable Prisma Access Agent and Save your setting.
Confirm that you want to disable the Prisma Access Agent.
Select Push ConfigPush to Push the Prisma Access Agent Configuration.