Learn about how IP addresses change and how to use a
new compute location for an existing location.
To optimize performance and improve latency,
Prisma Access can introduce new
compute locations for
locations you have already deployed as part of a plugin upgrade.
When you upgrade the plugin, the existing compute location-to-location
mapping does not change, but you can choose to take advantage of
the new compute location. If you change the compute location, Prisma
Access changes the gateway and portal IP addresses (for mobile users)
and Service IP addresses (for remote networks) for the location
or locations to which the new compute location is associated. If
you use allow lists in your network to provide users access to internet
resources such as SaaS applications or publicly accessible partner
applications, you need to add these new IP addresses to your allow
lists.
To upgrade to a new compute location after it becomes
available, complete the following task.
Since you need to
allow time to delete and add the existing location and change your
allow lists (for mobile users) or peer IPSec tunnel IP address (for
remote network deployments), Palo Alto Networks recommends that
you schedule a compute location change during a maintenance window
or during off-peak hours.
To reduce down
time for mobile user deployments, use the
API to pre-allocate
the new mobile user gateway and portal IP addresses before you perform
these steps.
