NGFW ZTNA Connector Integration leverages your Palo Alto Networks® NGFWs (VM-Series andHardware NGFW) as ZTNA Connectors. This provides secure, automated connectivity to private applications for Prisma Browser users. This feature enables automated connectivity to applications defined by Fully Qualified Domain Name (FQDN), or wildcard FQDN, supporting Prisma Browser users.

This feature addresses challenges like manual tunnel configuration, complex Network AddressTranslation (NAT) management for overlapped networks. It integrates your NGFWs directly into the Prisma Browser Connector architecture, automating these processes and optimizing application access. This approach minimizes operational complexity and improves user experience by providing more direct application access.

Your NGFW acts as a ZTNA Connector, establishing secure IPSec tunnels with Prisma Browser Connector in relevant cloud regions. Your management interface centrally manages your NGFWs, registering them with the Prisma Access ZTNA Connector, which generates and applies necessary configurations (IPSec, Border Gateway Protocol (BGP), NetworkAddress Translation (NAT), Loopback IP addresses) to your NGFW.

When multiple NGFW Connectors are grouped in a Connector Group, configuration removal is deferred until the last Connector in that Connector Group is explicitly deleted. This ensures configuration integrity during phased de-provisioning. Select the appropriate tab for your management interface to configure NGFW Connector.