>
    Strata Copilot
    Preinstall Tasks for Prisma Access Agents on Linux
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access Agent
    3. Prisma Access Agent for Desktop Devices
    4. Preinstall Tasks for Prisma Access Agents on Linux
    Download PDF
    Prisma Access Agent

    Preinstall Tasks for Prisma Access Agents on Linux

    Table of Contents

    Preinstall Tasks for Prisma Access Agents on Linux

    Complete the relevant preinstall tasks before installing the Prisma Access Agent on Linux devices.
    Where Can I Use This?What Do I Need?
    • Prisma Access Agent
    • Minimum Prisma Access Agent version: 25.7
    • Linux devices
    • Internet access
    Before you begin to install Prisma Access Agent on Linux, complete the relevant preinstall tasks.

    Set Up the Prisma Access Agent System Tray Icon on Ubuntu 22.04

    If you're using Ubuntu 22.04, before you install the Prisma Access Agent, you need to set up the system tray icon functionality for Prisma Access Agent by installing the required GNOME extensions.
    Before you begin:
    • You need to be running Ubuntu 22.04 with the GNOME desktop environment
    • Ensure that you have administrator (sudo) privileges.
    • If you're running on a VM, you might need to disconnect GlobalProtect or Prisma Access Agent from the host system before proceeding.
    • Each user on the Linux system needs to complete this configuration individually. These settings apply per user account rather than system-wide.
    1. Remove any existing AppIndicator extension that might conflict by running the following command in the shell:
      sudo apt remove gnome-shell-extension-appindicator
    2. Install the GNOME Extension Manager to easily manage extensions:
      sudo apt install gnome-shell-extension-manager
    3. Apply the changes by logging out of the operating system and logging back in again.
    4. Install the AppIndicator Support extension.
      1. Open the Extension Manager application.
      2. Browse the extensions.
      3. Enter KStatus in the search bar.
      4. Locate AppIndicator and KStatusNotifierItem Support in the search results and Install the extension.
    5. Verify the installation of the AppIndicator Support extension.
      1. Go to the User-Installed Extensions section in Extension Manager.
      2. Confirm that AppIndicator and KStatusNotifierItem Support appears in the list of installed extensions and the extension is enabled (toggle is in the "on" position).
    6. Proceed with the Prisma Access Agent installation.
      Once the extension is successfully installed and verified, you can proceed to install the Prisma Access Agent. The system tray icon should now display properly.

    Disable IPv6 on Linux Devices (Optional)

    Prisma Access Agent for Linux does not support IPv6 sinkholing. If your organization allows IPv6 traffic, you'll need to disable IPv6 on your device before installing the agent to minimize your exposure from IPv6-based threats.
    1. Disable IPv6 at the system level using any available methods such as GRUB.
      1. Edit the GRUB configuration file:
        sudo nano /etc/default/grub
      2. Add or modify the GRUB_CMDLINE_LINUX parameter to include ipv6.disable=1:
        GRUB_CMDLINE_LINUX="quiet splash ipv6.disable=1"
      3. Update the GRUB configuration:
        • For Ubuntu: 
          sudo update-grub
        • For Arch Linux or Fedora: 
          sudo grub-mkconfig -o /boot/grub/grub.cfg
      4. Reboot the system:
        sudo reboot
      5. Verify that IPv6 is disabled:
        cat /proc/sys/net/ipv6/conf/all/disable_ipv6
        The command should return 1 if IPv6 is successfully disabled.
    2. The Mozilla Firefox browser also requires disabling IPv6 for DNS queries. To disable DNS over HTTPS (DoH) in Firefox:
      1. Open Firefox and enter about:config in the address bar.
      2. Search for network.dns.disableIPv6.
      3. Set the value to true.

    © 2025 Palo Alto Networks, Inc. All rights reserved.