Features Introduced in Prisma Access 2.0 Innovation
The following table describes the new features introduced in Prisma Access version 2.0 Innovation.
The Cloud Services plugin 2.0 Innovation version requires the following minimum software versions for Panorama and GlobalProtect:
GlobalProtect:Supported version: 5.1.
The Cloud Services Plugin 2.0 Innovation version includes all the features from the Cloud Services plugin 2.0 Preferred version and adds the following features.
Autonomous Digital Experience Management Integration
Autonomous Digital Experience Management (DEM) is now available for mobile users who use the GlobalProtect app!
You can use Autonomous Digital Experience Management (Autonomous DEM) to get visibility into user experience, application and network performance. With Autonomous DEM, you gain segment-wise insights across the entire service delivery path, with real and synthetic traffic analysis that enables the ability to drive autonomous remediation of digital experience problems when they arise. Get Started Now.
Autonomous DEM requires an add-on license, and requires The GlobalProtect app version 5.2.6 or later.
Support for PAN-OS 10.0.3
New Cloud Services 2.0 Innovation customers are running a dataplane version of PAN-OS 10.0.3 and are able to take advantage of PAN-OS 10.0 features up to PAN-OS 10.0.3, including the following features:
GlobalProtect version 5.2.5 is required to use GlobalProtect App Log Collection for Troubleshooting.
Enterprise DLP Support
Prisma Access supports the use of the Panorama plugin for DLP 1.0.3 to implement Enterprise Data Loss Prevention (DLP) with Prisma Access.
If you have an existing deployment with Enterprise DLP on Prisma Access and want to upgrade to the Cloud Services plugin 2.0 Innovation version, Palo Alto Networks provides you with a migration process to transfer to using DLP with the DLP Panorama plugin.
If you have a Prisma Access for Users license, you can quickly resolve mobile user connection, performance, and access issues by having GlobalProtect users generate and send an easy to read, comprehensive report from the end user’s endpoint to Cortex Data Lake for further analysis.
This release adds a UI element to allow you to generate and store the certificate that is required for communication between the GlobalProtect app and Cortex Data Lake, eliminating the CLI requirement.
Explicit Proxy Support
You can configure an explicit proxy to secure mobile users with a proxy URL and a Proxy Auto-Configuration (PAC) file. If your organization’s existing network already uses explicit proxies and deploys PAC files on your client endpoints, you can smoothly migrate to Prisma Access to secure mobile users’ outbound internet traffic.
You can still secure mobile users with GlobalProtect. If you want to add an explicit proxy to an existing mobile users deployment, you can divide your mobile users license between the users you want to secure with GlobalProtect and the users you want to secure with an explicit proxy.
Explicit proxy uses your existing Mobile User license. Whether you have a new deployment or if you upgrade, you can divide your mobile user license between Mobile Users - GlobalProtect and Mobile Users - Explicit Proxy.
Explicit Proxy is currently available for new customers only; if you have an existing Prisma Access deployment, you will have the option to use Explicit Proxy at a later time.
Policy Optimizer Support
Prisma Access makes the following BGP community changes:
Cortex Data Lake Theater Support
Prisma Access supports the following Cortex Data Lake regions:
Support for Asymmetric Routing for Service Connections
Prisma Access removes the requirements to have a symmetric network path for the traffic returning from the data center. Asymmetric flows are allowed through the Prisma Access backbone. This removal allows you to configure ECMP or any other load balancing mechanism for service connections to your CPE.
This capability is not enabled by default; to enable it, change the
Backbone Routingoptions in your service setup settings.
Prisma Access offers the following enhancements when you specify DNS settings for mobile users and remote networks:
TLS 1.3 Support for Mobile Users (GlobalProtect) and Remote Networks
Prisma Access supports Transport Layer Security (TLS) 1.3 for mobile user (GlobalProtect) deployments and remote networks.
TLS 1.3 is not supported on Explicit Proxy deployments.
Route Aggregation Support for Remote Networks
You can advertise summary routes from data centers and the remote networks chooses the closest service connection as the next hop.
Load Balancing Improvements for Summary Prefix Advertisements on Multiple Service Connections
Prisma Access has made improvements that enhance load balancing for multiple service connections that you have onboarded in different Prisma Access locations. For example, if you have two service connections onboarded in the US West location and two service connections onboarded in the US East location, Prisma Access load balances the traffic for summary prefixes at each data center to which the service connections are attached. This enhancement effectively increases the available bandwidth for a data center location that you have connected using multiple service connections at different Prisma Access locations.
Protect from Web-Based Threats with Remote Browser Isolation (RBI)
To support a larger range of use cases and prevent malware, phishing, cryptomining, and other such threats, Prisma Access can integrate with third-party RBI cloud vendors using URL response page redirect or traffic steering over the Prisma Access Service connection to the RBI cloud. These integrations help with isolating all active, untrusted web content from endpoints that your users use to access business-critical internet services and internal networks, and ensure that the corporate network remains safe.
See https://www.paloaltonetworks.com/partners/alliance for our technology partners and solution briefs.
Recommended For You
Recommended videos not found.