Onboard a Remote Network

Learn how to onboard a new branch network to Prisma Access for consistent security enforcement.
To add a new remote network site to Prisma Access, start by specifying the location and defining the amount of bandwidth to allocate to the connection.
  1. Make sure that you have allocated bandwidth to the location where you’ll deploy the remote network. See Plan Your Prisma Access Remote Network Deployment.
  2. Go to
    Manage
    Remote Networks
    Remote Networks Setup
    .
  3. Give the remote network a descriptive
    Site Name
    .
  4. Select the
    Region
    in which the site is located, and the closest Prisma Access
    Location
    .
  5. (
    Only if you’re planning to use BGP for dynamic routing
    ) Enable
    ECMP Load Balancing
    so that the remote network site can use up to four IPSec tunnels.
    BGP is required for ECMP load balancing; QoS and static routes are not supported.
    To use ECMP load balancing, specify a minimum
    Bandwidth
    of
    50 Mbps
    . Prisma Access divides the bandwidth you select by the number of tunnels; for example, if you specify 300 Mbps and add four tunnels, each tunnel carries 75 Mbps. If one of the tunnels goes down, your network connection will now carry 225 Mbps instead of 300 Mbps.
  6. Continue to Connect a Remote Network Site to Prisma Access, where you’ll create an IPSec VPN tunnel to connect the remote network site to Prisma Access.

Recommended For You