>
    Strata Copilot
    Use the Prisma Agent App (Unmanaged Devices)
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Dynamic Privilege Access
    5. Use the Prisma Agent for Android to Access Your Projects
    6. Use the Prisma Agent App (Unmanaged Devices)
    Download PDF
    Prisma Access

    Use the Prisma Agent App (Unmanaged Devices)

    Table of Contents

    Use the Prisma Agent App (Unmanaged Devices)

    Use the Prisma Agent App (Unmanaged Devices)
    Where Can I Use This?What Do I Need?
    • Prisma Agent 26.4
    • Android 10 and later versions
    • Internet access
    To connect the app on unmanaged devices, complete the following steps.
    After a first-time installation, the Prisma Agent does not automatically connect to Prisma Access, even if your administrator configured Always On mode. After this first login, Always On mode takes effect and the agent connects automatically on subsequent logins.
    Each server address supports only one signed-in user at a time. If a different user needs to sign in on the same server, they must re-enroll: enter an incorrect server address and tap Continue to clear the current enrollment, then re-enter the correct server address and complete enrollment.
    1. Open the Prisma Agent app by tapping the PA Agent icon.
    2. Allo the Prisma Agent to add VPN configurations to your endpoint. A system prompt will appear requesting permission to set up a VPN connection. Tap OK. This setting enables the Prisma Agent to provide secure access for your device.
    3. Read the disclosure about the information the Prisma Agent may collect or access on your device. Tap Continue to acknowledge and accept the message.
    4. Enable Prisma Agent notifications on your endpoint. A notification permission dialog will appear. Tap Allow for the Prisma Agent to send you notifications.
      If you select Don't Allow, you will not receive any notifications from the app.
    5. Enter the server address that you have obtained from your IT administrator and tap Continue.
      If you're unable to connect and need to share logs with your IT administrator, tap ? in the top-right corner of the enrollment page. This opens a share sheet with a log archive that you can share via Gmail, Messages, Nearby Share, or other apps.
    6. Enter or select your project name and tap Continue.
      Enter the project name your administrator provided. The project name is case-sensitive. If you are assigned to more than one project, the app displays your authorized projects as a list so you can select rather than type. If you have only one project, the app displays the project entry screen.
    7. If prompted by the Android device, enter the credentials that you use to authenticate and access your Android device (such as your PIN, pattern, password, or biometric credentials like fingerprint or face unlock).
    8. Enter your organization credentials (username and password, and any multi-factor authentication prompts) to authenticate to the app and to your corporate network.
      If your administrator configured Prisma Agent to use the default system browser for SAML authentication, the default browser, such as Chrome, opens instead of the embedded browser. After you authenticate, tap Open Prisma Access Agent in the prompt that appears to return to the Prisma Agent app.
      After authentication is complete, the connection will be established, and the app will display the status as Connected.
    9. After you connect the app, the app typically displays a VPN icon in the Android status bar at the top of your screen.
    10. Tap Disconnect on the app when you no longer need to access resources through the Prisma Agent.

    © 2026 Palo Alto Networks, Inc. All rights reserved.