Integrate Prisma Access with On-Premises GlobalProtect Gateways (Prisma Access (Managed by Strata Cloud Manager))

1. Add your on-premises gateway to the list of gateways in the agent configuration.

   1. Go to ConfigurationNGFW and Prisma AccessConfiguration ScopePrisma AccessAccess Agent Setup and select the GlobalProtect App tab.
   2. Add App Settings.

   3. Add an external gateway.

      If you add a new agent configuration and you want to add the Prisma Access gateways to the list of external gateways in that configuration, you must set the Name to Prisma Access and the Address to gpcloudservice.com. Enter these values exactly as shown, and you can’t use either of these values for non-Prisma Access gateways.
   4. Enter the Name of the gateway and specify either the FQDN or IP address of the gateway in the Address field; this value must exactly match the Common Name (CN) in the gateway certificate.
   5. (Optional) If you want mobile users to only connect to the gateway when they are in the corresponding region, Add the Source Region to restrict the gateway to. For example, if you have a gateway in France, you would select FR (France). If you have a gateway in Sweden, you would select (SE) Sweden.

      One benefit of this is that users will then be able to access a gateway that enables access to internet resources in their own language.
   6. (Optional) Specify priorities in your gateway configuration.

      You can set the on-premises gateway to a higher priority, or to a lower priority.

      • To set the on-premises gateway to a lower priority than the default Prisma Access gateway, set the Priority to High or Medium.
        If you add more gateways and want to set different priorities for each gateway, you can set the Priority to High, Medium, Low, or Lowest.
      • To set the on-premises gateway to a higher priority than the default, set the Priority to Highest.
        If you want to set the on-premises gateway to a higher priority, you must also edit the default Prisma Access gateway and set the priority to a Priority that’s lower than Highest.

   7. Give an external gateway priority over another external gateway. For example, you want to give US External Gateway priority for deployments in the United States.

      1. In the default Prisma Access gateway setup, set the priority for the US region to Medium.

      2. For your external gateway (US External Gateway in the example), use the drop-down set the Source Region for US External Gateway Priority to Highest.

   8. Select Manual.

      Selecting this check box allows GlobalProtect users to manually select this external gateway in their GlobalProtect app.
2. Save your changes.
3. Push Config.