Focus

Prisma Access

Authorize Mobile Users in Prisma Access

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Release Notes
Select a Document
- 6.1 Preferred and Innovation
- 6.0 Preferred and Innovation
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
Activation & Onboarding
Administration
Select a Document
- 4.0 & Later
- Prisma Access China
Integrations
Incidents & Alerts

Add Microsoft Entra ID

Secure AIP Labeled Files with Enterprise DLP

Authorize Mobile Users in Prisma Access

Learn how to authorize mobile users in Prisma Access.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)	Prisma Access license Minimum Required GlobalProtect Client Version: 6.0 or a later version

If you are using an explicit proxy, ensure to set it up for mobile users. After adding your Microsoft Entra ID (formerly Azure Active Directory (Azure AD)) in the Cloud Identity Engine, authorize users in Prisma Access.

In Prisma Access, verify if it is connected to Cloud Identity Engine, and that Cloud Identity Engine is sharing directory information with Prisma Access.
1. Select ConfigurationNGFW and Prisma AccessIdentity ServicesCloud Identity Engine.
2. Confirm the directory details you added in the Cloud Identity Engine app for the integration.
Mark the incoming traffic based on the source.
1. Select ConfigurationNGFW and Prisma AccessSecurity ServicesSecurity Policy.
2. (For GlobalProtect mobile users and remote networks only) Add Rule or edit an existing security policy rule for GlobalProtect mobile users or Remote Networks.
3. (For explicit proxy mobile users only) Add Rule or edit an existing security policy rule for Explicit Proxy mobile users.
4. Add users or user groups from the Microsoft Entra ID to your security policy rule and save the policy.
  
  View the users and user groups you added under the Source column.
Push the configurations.
Verify the user or user group mapping.
- For GlobalProtect mobile users only
1. In Prisma Access, select Activity InsightsInsightsUsers.
  
  View details about mobile users and devices connected for a time range you select.
- For explicit proxy mobile users only
1. Copy the PAC file URL to the endpoint.
  
  Go to ConfigurationNGFW and Prisma AccessConfiguration ScopePrisma AccessExplicit ProxyInfrastructure Settings to view the PAC file URL.
2. Access a URL that requires authorization.
3. Enter the credentials.
4. In Prisma Access, view the user mapping information by running the show user ip-user-mapping all command.
5. (Optional) In Prisma Access, select Activity InsightsInsightsUsers.
  
  View details about mobile users connected for a time range you select.

Add Microsoft Entra ID

Secure AIP Labeled Files with Enterprise DLP

Prisma Access Docs

Authorize Mobile Users in Prisma Access

Prisma Access Docs

Authorize Mobile Users in Prisma Access

Activation and Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

FedRAMP

Hardware Reference

Hardware Quick Start Guides

Virtual ION Deployment

3rd Party Integrations

Best Practices

Experts Corner