>
    Strata Copilot
    Configure Device Management Policy
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Stacked Policies
    5. Configure Device Management Policy
    Download PDF
    Prisma SD-WAN

    Configure Device Management Policy

    Table of Contents

    Configure Device Management Policy

    Prisma SD-WAN allows to create, modify, and delete device management policies.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    If a site has two devices configured for High Availability (HA), you must apply this configuration to each device individually.
    To configure access for a specific interface, you can perform several actions: review existing policies, create new ones, or delete those you no longer need.
    • Reviewing Policies: Start by reviewing any policies that have already been created for the interface.
    • Creating a New Policy: To create a new policy, first select the interface. Then, specify the desired access (for example, Allow Ping, Allow SSH). You must also provide a name for the policy extension, such as "remote-monitoring," and a prefix for the policy to define the source of the traffic.
    • Deleting Policies: You can delete existing policies as needed to remove access rules.
    • Disabling a Policy: The Disabled button is a useful feature for troubleshooting. It allows you to keep a policy configuration in place while temporarily bypassing its rules without having to delete them.

    Create a New Device Management Policy

    1. Select ConfigurationResourcesDevice Management Policy.
    2. In the Choose Site, Element section, search for a Site and select it.
    3. Choose the Element (ION device) from the dropdown.
      A list of all interfaces on the selected ION device, including all sub-interfaces, is displayed.
    4. Select the Interface to which the policy is to be applied and click Get.
    5. In the View/Set Configuration section, fill in the policy details:
      • Name: Enter a name for the policy.
      • Namespace: This field is auto-filled.
      • Interface: This field is auto-filled.
    6. Enter the Prefix (IPv4 or IPv6), select the App (for example, Ping), and choose an Action (for example, Allow).
    7. Click Submit to save the new policy.

    Modify or Delete a Policy Rule

    1. In the Choose Site, Element section, select the Site, Element, and Interface associated with the policy you want to change. Click Get.
      The View/Set Configuration section displays the existing policy rules.
    2. To edit a rule, you can modify the Prefix (IPv4 or IPv6), App, or Action for the desired line item.
    3. To delete a rule, locate the specific rule you want to remove and click the Delete button next to it.
    4. After making your changes, click Submit to update the policy.

    © 2026 Palo Alto Networks, Inc. All rights reserved.