Configure Agent Settings for Migration (Strata Cloud Manager)

Table of Contents

Configure User Authentication for Migration (Strata Cloud Manager)

Configure Forwarding Profiles to Replace GlobalProtect Split Tunnel Settings (Strata Cloud Manager)

Configure Agent Settings for Migration (Strata Cloud Manager)

Configure basic agent settings, anti-tamper protection, and gateway settings for the Prisma Agent on a Strata Cloud Manager-managed tenant.

Agent settings control how the Prisma Agent connects and behaves on endpoints. During migration, you configure a default agent profile to match your GlobalProtect deployment's connect method, and optionally enable anti-tamper protection before you uninstall GlobalProtect. External gateway settings are shared with GlobalProtect and carry over automatically; you must reconfigure Internal Host Detection specifically for the Prisma Agent.

Configure Basic Agent Settings
1. Select ConfigurationNGFW and Prisma AccessConfiguration ScopeAccess AgentSetupPrisma Access Agent.
2. In the Agent Settings table, select the DEFAULT agent settings profile.
3. Review the following default settings and change them to meet your requirements:
  User Entities: Match Any
  Connect method: Always On
(Optional) Configure Anti-Tamper Protection

Enable anti-tamper protection to prevent users from disabling or uninstalling the Prisma Agent after GlobalProtect is removed.
1. In Agent Settings, scroll to the App Configuration section and select Show Advanced OptionsAnti-tamper.
2. Enable Privileged Access Protection.
3. Configure a Privileged Access Token ("break glass in case of emergency" password).
  
  For the full anti-tamper configuration, see Configure Enhanced Anti-Tamper Protection for Prisma Agents.
Verify Gateway Configuration

External Gateway configurations are shared with GlobalProtect and do not require reconfiguration. However, you must reconfigure Internal Host Detection for the Prisma Agent.

Prisma Access Remote Network Internal Gateway is not supported. However, internal gateways are supported when using on-premises NGFWs. For more information, see Configure Gateways for the Prisma Agent.