Prisma Access Agent Service Continuity
Focus
Focus
Prisma Agent

Prisma Access Agent Service Continuity

Table of Contents

Prisma Access Agent Service Continuity

Prisma Access Agent maintains secure connections and enforces policies during Endpoint Manager outages, with no manual intervention required.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • NGFW (Managed by Panorama)
Prisma Agent depends on Endpoint Manager for authentication, security configuration delivery, and agent lifecycle operations. A regional Endpoint Manager outage does not interrupt Prisma Access data-plane traffic. The Prisma Agent management connection may reconnect automatically through a healthy region without requiring user reauthentication or agent re-enrollment. When an Endpoint Manager region becomes unavailable, management-plane requests are automatically routed to a healthy region without administrator intervention.
A configuration commit that is in progress during a regional outage may fail. If it is reported as failed, resubmit the commit. Until a successful commit completes, Prisma Agent continues enforcing its last successfully received complete configuration. If a regional outage occurs during a staged upgrade rollout for Windows and macOS agents, the rollout resumes automatically through a healthy region. Prisma Agents that have not yet received the upgrade continue running their current version until the rollout resumes.
After Endpoint Manager connectivity is restored, Prisma Agent reconnects automatically. When a recovered region is healthy, it can resume serving Endpoint Manager traffic. Traffic continues to be served by healthy regions during recovery.