Prisma Access
Enable ZTNA Connector (Strata Cloud Manager)
Table of Contents
Enable ZTNA Connector (Strata Cloud Manager)
Learn how to configure a ZTNA Connector in Prisma Access.
Use the following workflow to enable ZTNA Connector in Cloud Managed Prisma
Access.
You must define separate IP address blocks for your connectors and your
applications and the blocks cannot overlap with:
- Each other
- The Prisma Access infrastructure subnet
- The GlobalProtect IP address pool
- If you are using service connections with ZTNA Connector, subnets advertised from a data center to the Prisma Access service connection using static routes or BGP
- Configure the IP address blocks that Prisma Access will use internally to route traffic to the ZTNA Connector and the private apps you onboard.
- Select .
![]()
- Add ZTNA Connectors Application IP Blocks.You can add a single Application IP Block, or multiple blocks depending on your deployment. You can also Advertise Application IP blocks to Remote Networks to provide remote network access.
- Add ZTNA Connectors Connector IP Blocks that Prisma Access will use internally to route traffic between mobile
users, remote networks and the connector VMs in your data centers.You can add a single Connector IP Block, or multiple blocks depending on your deployment.
![]()
- Click Save to save the IP address block configuration and then Commit and push the configuration.
Launch ZTNA Connector from Strata Cloud Manager.- Select .
- Prisma Access begins setting up the infrastructure for the ZTNA
Connector. This may take a few minutes.
![]()
- When onboarding finishes, the ZTNA Connector Overview displays.
![]()
- Select .
