>
    Configure Applications for Privileged Remote Access
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Privileged Remote Access
    4. Configure Applications for Privileged Remote Access
    Download PDF
    Prisma Access

    Configure Applications for Privileged Remote Access

    Table of Contents

    Configure Applications for Privileged Remote Access

    Add the remote apps that your users will access using the Privileged Remote Access portal.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Panorama or Strata Cloud Manager)
    • Prisma Access 5.2.1
    • Minimum Prisma Access dataplane version: 11.2.4
    • Prisma Access license with a Mobile User subscription
    • Privileged Remote Access add-on license
    After you set up the Privileged Remote Access (PRA) portal, you can add the apps that your users will access from the PRA portal. You can add apps that users can access using the RDP, SSH, or VNC protocol.
    You can also set up application groups to help manage which users can access which groups of apps.

    Add Applications

    Add remote applications to the PRA portal that your users can access using RDP, SSH, or VNC. For example, you can set up a PRA app for the remote access of a Windows desktop by using RDP, or to remotely log in to a computer using SSH.
    Before you can add the applications that your users will access from the PRA portal, you will need the following information about the apps:
    • The type of protocol that your users will use to access the app
    • The FQDN or IP address of the app destination
    • The port number used to reach the app (if different from the default port)
    • Login credentials for the app on the target machine (optional)
    To resolve the internal hostnames of applications deployed in your data center, you need to have an active Service Connection to the data center and firewall rules to access your internal DNS server.
    To add the apps to your PRA portal:
    1. Go to WorkflowsPrivileged Remote AccessApplications.
    2. Click the Applications tab and Add Application.
    3. Configure general settings for the app.
      1. Select a Protocol (RDP, SSH, or VNC).
      2. Enter the Name of the app.
      3. (Optional) Enter a description for the app.
      4. Enter the Destination FQDN or IP address. The FQDN or IP address of the app must be reachable using a Service Connection in your Prisma Access tenant.
      5. Enter the Port for the destination, if different from the default port.
    4. (Optional) Configure authentication settings for the app. The authentication settings that you enter depend on the type of protocol that you selected.
      • For RDP apps:
        Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
      • For SSH apps:
        1. Enter the User Name and Password for the remote app, and confirm the password. If you don't provide a password, you must provide a private key.
        2. (Optional) Enter the Private Key. If the private key is encrypted, enter the Passphrase.
        3. (Optional) Enter the Host Key entries for the remote host, which you can obtain by running the ssh-keyscan command on the host. Enter one key per line. Lines that begin with # are comments.
      • For VNC apps:
        1. (Optional) Enter the User Name and Password for the remote app, and confirm the password. The username and password are optional, but both must be provided or both must be empty.
        2. (Optional) Select Enable File Transfer to allow your users to upload and download files using SFTP (SSH File Transfer Protocol).
          1. Enter the SFTP Username and SFTP Password. If you don't provide a password, you must provide the SFTP private key.
          2. Enter the SFTP Port to use for file transfers. The range is 0-64435.
          3. Enter the SFTP Private Key if you're not using the SFTP password.
          4. If the SFTP private key is encrypted, enter the SFTP Passphrase.
          5. (Optional) Enter the SFTP Host Key.
    5. Save your settings. The application is added to the Applications table. You can visit this page later to add, edit, or remove an app.

    Set Up Application Groups

    Create application groups to organize the applications that your users can access through the policies. For example, you might have a group of users who should access only certain applications, so you can associate a user or a group of users to an application group.
    To set up application groups:
    1. Go to WorkflowsPrivileged Remote AccessApplications.
    2. Click the Application Groups tab and Add a group.
    3. Enter a meaningful Name for the application group.
    4. Select the Applications that you want to put in the group.
    5. (Optional) Enter a description for the group.
    6. Save your settings. The group is added to the Application Groups table. You can visit this page later to add, edit, or remove an application group.

    © 2024 Palo Alto Networks, Inc. All rights reserved.