Generate cookie for authentication override

—Enables the Prisma Access to generate encrypted, endpoint-specific cookies and issue authentication cookies to the endpoint.

Accept cookie for authentication override

—Enables Prisma Access to authenticate users with a valid, encrypted cookie. When the app presents a valid cookie, Prisma Access verifies that the cookie was encrypted by Prisma Access originally, decrypts the cookie, and then authenticates the user.

Cookie Lifetime

—Specifies the hours, days, or weeks for which the cookie is valid (default is 24 hours). The range for hours is 1 to 72; for weeks is 1 to 52; and for days is 1 to 365. After the cookie expires, the user must re-enter their login credentials and then Prisma Access subsequently encrypts a new cookie to send to the app. This value can be the same as or different from the Cookie Lifetime that you configure.

Certificate to Encrypt/Decrypt Cookie

—Selects the RSA certificate used to encrypt and decrypt the cookie.

Local Network Access

—Give Windows and Mac users access to local resources, without requiring them to first connect to Prisma Access.

Exclude Traffic

—Specify traffic to exclude from Prisma Access policy inspection and enforcement based on application, domain, and route (like an IP address).

Customize Include Traffic

—By default, the GlobalProtect app routes all traffic to Prisma Access except what's in the exclude list. Specify traffic that the GlobalProtect app should always route to Prisma Access, even when it meets exclude list criteria.