Use the Prisma Agent App (Managed Devices) iOS

Table of Contents

Use the Prisma Agent App for iOS (Unmanaged Devices)

Connect the Prisma Agent to a Different Location

Use the Prisma Agent App (Managed Devices) iOS

Use the Prisma Agent App on managed devices on iOS.

Where Can I Use This?	What Do I Need?
Prisma Agent	iOS 16 and later versions Internet access

If your iOS endpoint is managed by a mobile device management (MDM) system, your administrator may have automatically pushed the Prisma Agent to your endpoint and configured the agent.

Open the Prisma Agent app by tapping the Prisma Agent app icon (

).
The agent gets connected based on the connect method configured by your Prisma Agent administrator through mobile device management (MDM) software only. Prisma Agent supports the following connect methods:
- Always-On
  In an Always-On configuration, Prisma Agent automatically connects as soon as you log in.
- On-Demand
  In an on-demand configuration, you must manually connect Prisma Agent through the application. Traffic is routed through the Prisma Agent app only after you initiate and establish the connection.
- Automatic Configuration
  - Per-App
    In a per-app configuration, your administrator can configure the managed apps that will route traffic through Prisma Agent. When you access the managed app, Prisma Agent will automatically connect and only traffic for the managed apps your administrator has configured under the configuration profile will be routed through Prisma Agent.
  - On-Demand Connect Rules
    In an on-demand connect rules configuration, while you can manually initiate a connection to the Prisma Agent, administrators can also configure Prisma Agent to connect automatically when you access a specific domain.
If your agent is always-on, you'll receive a notification to authenticate with your identity provider.
1. Tap the notification to proceed.
2. Enter your organization credentials to authenticate to the app:
If your agent is on-demand, manually connect to the agent.
1. Connect by clicking the lock icon.
2. Enter your organization credentials to authenticate to the app:
After authentication is complete, the connection is established and the app displays the status as Connected.
(Prisma Agent 25.7.0) When using Prisma Agents configured for per-app deployment, you will receive a notification if you connect to a network that requires captive portal authentication, such as public Wi-Fi at hotels, cafes, or airports.
1. Tap on the notification to proceed.
2. The captive portal login page will appear in the embedded browser. Enter your credentials or accept the terms of service as required by the network provider. For example:
After you connect the app, the app displays the VPN icon on the screen.
For Prisma Agents agents with on-demand or per-app configurations, tap Disconnect on the app when you no longer need to access the resources through Prisma Agent.

For Prisma Agents with always-on configurations, you won't be able to disconnect the agent: