Service IP and Egress IP Address Allocation for Remote Networks
Prisma Access has more than 100 locations available to
accommodate worldwide deployments and provide a localized experience.
Two locations might map to the same
Service IP address
which you use as the peer IP address when you set up the IPSec tunnel
for the remote network connection. However, the locations might
use different egress IP addresses to make sure that the user gets
the correct default language for the region.
The following example shows a customer deployment with two remote
network locations deployed in Canada: Central Canada and Eastern
Canada. Prisma Access assigned the same
Service IP Address
both locations. When you configure the remote network tunnel, use
this IP address as the peer IP address when you create the IPSec
tunnel for the remote network connection.
However, Eastern Canada uses a different default language (French)
than Central Canada (English). For this reason, Prisma Access assigns
them different egress IP addresses. If you run the API script for
egress IP addresses, you will receive two different IP addresses
for these two locations.