If you determine that your deployment would benefit by having some users connect using
GlobalProtect and some users connect using an Explicit Proxy, Prisma Access allows you
to distribute the users in your GlobalProtect for Users license between Mobile
Users—GlobalProtect and Mobile Users—Explicit Proxy.
your goal is to secure mobile users’ access to all applications,
ports, and protocols, and to get consistent security whether the
user is inside or outside your network, use Mobile Users—GlobalProtect.
The GlobalProtect infrastructure is deployed for you and scales
based on the number of active users and their locations. After you
complete the configuration, users then connect to the closest Prisma
Access gateway (location) you have onboarded for policy enforcement.
This enables you to enforce consistent security for your users even
in locations where you do not have a network infrastructure and
The GlobalProtect app installed on the users'
endpoint secures users traffic to internet, SaaS applications, your internal
and public cloud resources.
your organization has designed its network around an explicit proxy
design, the explicit proxy connect method will help you quickly
replace the existing method and move to the Prisma Access Secure
Access Service Edge (SASE) solution. You can then send internet
and external SaaS application traffic to the Prisma Access infrastructure
and enforce security in the cloud.
With an explicit proxy,
you configure a proxy URL and a Proxy Auto-Configuration (PAC) file.
The GlobalProtect app is not required to be installed on the users’