Persistent Public IP Addresses for Mobile
User Gateways | This feature is applicable if you are adding Prisma
Access public IP addresses to an allow list in your network to control
access for SaaS or public applications. With this release,
Prisma Access now assigns two new sets of public IP addresses for
mobile user gateways: One set that is assigned to
gateways that are currently active.
These new IP addresses will persist
across future upgrades. Prisma Access provides each customer
with their own unique set of IP addresses. While the currently assigned
IP address will change after you upgrade, this change does not affect
mobile users' ability to connect to Prisma Access.
Public
IP addresses for remote networks will not change after you upgrade,
and you do not have to reconfigure your IPSec tunnels.
You
can retrieve these new addresses by retrieving your API key and
entering a curl command in the following format: curl -k -H header-api-key: Current-API-Key "https://api.gpcloudservice.com/getAddrList/latest?get_egress_ip_all=yes"
For example, given an API key of 123abc ,
use the following curl command to retrieve the public IP address: curl -k -H header-api-key:123abc "https://api.gpcloudservice.com/getAddrList/latest?get_egress_ip_all=yes"
If
you have a large number of mobile users from a single region, the
reserved IP addresses might be insufficient to scale; in this case,
Prisma Access adds more public IP addresses to the allocated IP
sets and you will have to retrieve those new IP addresses to add
to your allow lists. These extra sets of IP addresses also persist
after an upgrade. Continue to use the curl command to get notified
when additional sets of IPs are added to the reserved pool. |