Log in to the Dynamic Privilege Access Enabled Prisma Access Agent

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Activation & Onboarding
Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Install the Prisma Access Agent

Change Preferences for the Dynamic Privilege Access Enabled Prisma Access Agent

Log in to the Dynamic Privilege Access Enabled Prisma Access Agent

To securely access applications and resources for your projects in your organization's network, you must log in to the Dynamic Privilege Access enabled Prisma Access Agent.

Where Can I Use This?	What Do I Need?
Prisma Access Agent	macOS 12 or later desktop devices or Windows 10 version 2024 or later or Windows 11 desktop devices Internet access

To access your organization's network, resources, SaaS applications, or the internet, log in to the Prisma Access Agent using your login credentials.

After you log in to the Prisma Access Agent, you’re automatically connected to your network using the best Prisma Access location (sometimes called a gateway). The best location is automatically chosen to provide you with the best performance to allow for a better experience, such as viewing websites in your local language. When your device is located outside your organization's network, the agent finds the best location to give you the best performance when connecting to the network.

Before you begin, the Prisma Access Agent must be installed on your device. Typically, your administrator will deploy the Prisma Access Agent to the device that you use to access your organization's network, resources, and applications. The agent is configured according to policy rules defined by your administrator and deployed to your device. However, if your administrator did not deploy the Prisma Access Agent to your device, you will need to manually install the Prisma Access Agent.

Depending on how Prisma Access is set up in your organization, your administrator should provide you with the following login information:

The name of the Prisma Access server hosting the service that manages your Prisma Access Agent. There can be multiple servers depending on the Prisma Access setup.
The name of the projects that you work on if your organization uses Dynamic Privilege Access. Dynamic Privilege Access enables you to access your organization's network and resources based on the project you are assigned to, so you won't accidentally access another project's resources. If you are assigned to work on more than one project, you can easily switch projects.

Depending on the settings for your operating system, the app icons and app interface can appear in dark mode or light mode.

Launch the Prisma Access Agent by clicking the Prisma Access Agent icon

from the macOS menu bar or Windows taskbar.
If prompted, enter or select the Server Name for the Prisma Access server that your administrator provided and Continue.

The format of the server name is <example.domain.com> without the https:// protocol. The maximum length of the server name is 256 characters.
Enter the project name that your administrator sent you and Continue.

The maximum length for the project name is 32 characters.
In the login page that appears in your default web browser, sign in to your organization's single sign-on (SSO) app, such as Okta or Azure Active Directory (AD), by entering your login credentials for your organization.

If your administrator enabled multi-factor authentication (MFA), you’ll need to complete additional verification in the browser when you log in.
When your web browser prompts you, click Open.

If you don’t want the browser to prompt you the next time you log in, select Always allow <site> to open these types of links in the associated app, then click Open (if supported by your default web browser).
Wait while Prisma Access Agent connects to Prisma Access.
After successfully logging in, you’re connected automatically to the best available Prisma Access location. If you signed in using a project, you are connected to the best available location for your project.

You can now access your organization's resources and SaaS apps, along with secure access to the internet.

If your administrator enabled Always On mode for Prisma Access Agent, you cannot disconnect from Prisma Access due to your organization's policy. However, you can still change Prisma Access locations.
If your administrator enabled On Demand mode for Prisma Access Agent, you must click the lock icon to connect to Prisma Access.