>
    Onboard a ZTNA Connector in Google Cloud Platform
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access ZTNA Connector
    5. Onboard the ZTNA Connector VM in Your Data Center
    6. Google Cloud Platform Deployments Supported by ZTNA Connector
    7. Onboard a ZTNA Connector in Google Cloud Platform
    Download PDF
    Prisma Access

    Onboard a ZTNA Connector in Google Cloud Platform

    Table of Contents

    Onboard a ZTNA Connector in Google Cloud Platform

    ZTNA Connector deployment in Google Cloud Platform.
    • Review the requirements and guidelines and the FQDNs and ports you need to configure to use Prisma Access ZTNA Connector in the Google Cloud Platform (GCP).
    • Retrieve and copy the Connector key and secret values on the Prisma SASE Portal: WorkflowsZTNA ConnectorConnectors, find the Connector object you created in Prisma Access to associate with this VM, and select Copy Token; then, copy the Key and Secret values.
    After you’ve met all the prerequisites, follow these steps to onboard a Prisma Access ZTNA Connector in GCP.
    1. Go to GCP Marketplace and search for Prisma Access ZTNA Connector.
    2. Choose the software plan that best suits your requirement.

    Deploy ZTNA Connector 1-Arm in GCP

    Follow these steps to deploy ZTNA Connector 1-Arm in GCP:
    1. LAUNCH to configure ZTNA Connector 1-Arm.
    2. On New Prisma Access ZTNA Connector 1-Arm deployment, Download the terraform.
    3. Choose your option (commercial or FedRAMP) based on your requirement. You should change directory to your required environment.
      The details related to the package and the commands are available in README.md file.
    4. Modify your deployment variables in the file terraform.tfvars and run the following commands.
      1. terraform init- initializes the terraform
      2. terraform plan- output of this command will show the GCP resources that will be created
      3. terraform apply- deploys them into your GCP account
    5. (Optional) Enable the GCP APIs required to deploy a virtual machine from the marketplace.
    6. Configure the following:
      • Enter the Deployment Name that allows you to identify your virtual machine.
      • Select the Zone where you have the applications for this Connector located.
      • Use the default value for the Machine type. The qualified machine type for this Connector is n2-standard-4.
      • Enter the Prisma ZTNA Connector License Key and Prisma ZTNA Connector License Secret values you retrieved from the Prisma SASE Portal.
      • Configure the following in the Boot Disk section:
        • Use the default Boot disk type.
        • Select 40 GB as the Boot disk size in GB.
      • Expand the Networking (VPCs and subnets must be pre-created) section and select the Network interface details.
        • Select the Network that contains the subnet you created.
        • Select the Subnetwork for the virtual machine to use.
    7. Click Done.
    8. Click Deploy to complete the onboarding process.

    Deploy ZTNA Connector 2-Arm in GCP

    Follow these steps to deploy ZTNA Connector in GCP:
    1. LAUNCH to configure.
    2. On New Prisma Access ZTNA Connector 2-Arm deployment, Download the terraform.
    3. Choose your option (commercial or FedRAMP) based on your requirement. You should change directory to your required environment.
      The details related to the package and the commands are available in README.md file.
    4. Modify your deployment variables in the file terraform.tfvars and run the following commands.
      1. terraform init- initializes the terraform
      2. terraform plan- output of this command will show the GCP resources that will be created
      3. terraform apply- deploys them into your GCP account
    5. (Optional) Enable the APIs required to deploy a virtual machine from the marketplace.
    6. Configure the following:
      • Enter the Deployment Name that allows you to identify your virtual machine.
      • Select the Zone where you have the applications for this Connector located.
      • Use the default value for the Machine type. The qualified machine type for this Connector is n2-standard-4.
      • Enter the Prisma ZTNA Connector License Key and Prisma ZTNA Connector License Secret values you retrieved from the Prisma SASE Portal.
      • In the Boot Disk section:
        • Use the default Boot disk type.
        • Select 40 GB as the Boot disk size in GB.
      • Expand the Networking (VPCs and subnets must be pre-created) section and select the Network interface details.
        • Select the Network that contains the subnet you created.
        • Select the Subnetwork for the virtual machine to use.
    7. Click Deploy to complete the onboarding process.

    © 2025 Palo Alto Networks, Inc. All rights reserved.