Prisma Access Agent Service Continuity
Prisma Access Agent maintains secure connections and enforces policies during
Endpoint Manager outages, with no manual intervention required.
| Where Can I Use This? | What Do I Need? |
- Prisma Access (Managed by Strata Cloud Manager)
- Prisma Access (Managed by Panorama)
- NGFW (Managed by Panorama)
|
|
Prisma Agent depends on Endpoint Manager for authentication, security
configuration delivery, and agent lifecycle operations. A regional Endpoint Manager
outage does not interrupt Prisma Access data-plane traffic. The Prisma Agent management connection may reconnect automatically through a healthy region without
requiring user reauthentication or agent re-enrollment. When an Endpoint Manager region
becomes unavailable, management-plane requests are automatically routed to a healthy
region without administrator intervention.
A configuration commit that is in progress during a regional outage may fail. If it is
reported as failed, resubmit the commit. Until a successful commit completes,
Prisma Agent continues enforcing its last successfully received complete
configuration. If a regional outage occurs during a
staged upgrade rollout for Windows and macOS agents, the
rollout resumes automatically through a healthy region.
Prisma Agents that
have not yet received the upgrade continue running their current version until the
rollout resumes.
After Endpoint Manager connectivity is restored, Prisma Agent reconnects
automatically. When a recovered region is healthy, it can resume serving Endpoint
Manager traffic. Traffic continues to be served by healthy regions during recovery.