Focus

Prisma Access Agent

Prisma Access Agent Prerequisites

Table of Contents

Configuration Management Overview for NGFW Support for Prisma Access Agent

Set Up Cloud Identity Engine for Prisma Access Agent User Authentication

Prisma Access Agent Prerequisites

Learn about the prerequisites for the Prisma Access Agent.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Panorama)	Check the prerequisites for the deployment you're using Contact your Palo Alto Networks account representative to activate the Prisma Access Agent feature

Learn about the prerequisites for the Prisma Access Agent, including the supported OS versions, the minimum supported version of Prisma Access, and the supported NGFW version. You can also learn about using Cloud Identity Engine for user authentication.

You can also check the prerequisites for the deployment you're using.

For Prisma Access Agent deployments on Prisma Access, be sure to:

Purchase a valid Prisma Access license with a Mobile User license subscription.
Activate Prisma Access and claim the licenses that you purchased.
Set up Prisma Access.

You will also need to activate the licenses for Strata Logging Service and Cloud Identity Engine.

For Prisma Access Agent licensing and activation on NGFW, review the information in NGFW Support for Prisma Access Agent.

What Prisma Access Versions Are Supported for Prisma Access Agent

The Prisma Access Agent can coexist with the GlobalProtect™ app on a Prisma Access tenant (instance).

The following minimum Prisma Access and Prisma Access dataplane versions are required:

Prisma Access 5.1 Preferred or Innovation
Prisma Access dataplane version 10.2.10 or 11.2.4

For coexistence tenants, be sure to configure GlobalProtect, including the GlobalProtect portal, before you configure the Prisma Access Agent.

What PAN-OS Versions Are Supported for Prisma Access Agent

The following PAN-OS versions are supported for Prisma Access or NGFW deployments:

Prisma Access Agent Version	PAN-OS Version
25.3.0.43	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and above
25.1.0.14	PAN-OS 11.2

What NGFWs Are Supported for Prisma Access Agent

The following are required for Prisma Access Agent deployments on NGFW:

Prisma Access Agent license for NGFW deployments

PAN-OS versions:

Prisma Access Agent Version	PAN-OS Version
25.3.0.43	PAN-OS 11.2.6 and above PAN-OS 10.2.10-h19, 10.2.17 and above
25.1.0.14	PAN-OS 11.2

What OS Versions Are Supported for the Prisma Access Agent App

Review the supported operating system versions for the Prisma Access Agent.

The Prisma Access Agent is supported on desktop devices that run the following operating systems:

Operating System	Version	Platform
macOS	macOS 14 and later	Mac x86_64 Mac ARM (M*)
Windows	Windows 10 version 2004 and later	Windows x86 Windows x86_64

You can install the Prisma Access Agent on an endpoint that already has the GlobalProtect app installed. The end users can switch between the Prisma Access Agent and GlobalProtect app.