Policy Folders

Prisma Access configuration can be shared across your entire environment, or you can create configuration that is specific to a deployment type (mobile users, remote networks, or service connection sites).
You can apply Prisma Access policy and configuration settings globally across your entire environment, or target policy and configuration settings to certain parts of your organization. Policy and configuration folders group settings that should be shared or are specific to deployment types. When it applies, you’ll see the policy folder at the top of a page, and you can toggle between folders.
Shared
policy and configuration settings help you to easily manage and enforce requirements that apply across all your network traffic. All rules, objects, and profiles that you create in the
Shared
folder, can be leveraged in the other folders.
As often as possible, we recommend that you work in the global configuration that applies across the Prisma Access service. Only create local configuration to address use cases that are unique to that part of your organization.
You can also target policy and configuration settings to the types of deployments where they make sense.
  • Mobile Users
    Settings apply across all mobile user connection types: GlobalProtect, Okyo Garde, and Explicit Proxy.
    • Remote Workforce
      Settings apply to GlobalProtect and Okyo Garde users.
    • Explicit Proxy
      Settings apply to mobile users with an explicit proxy connection.
  • Remote Networks
    Settings apply to remote network sites (branch offices, retail locations, etc.).
  • Service Connections
    Settings apply to service connection sites (HQ and data centers).
Depending on the context you’re working in, you might also see a Location column displayed for rules or profiles. This column indicates the rule or profile’s folder.

Recommended For You