How the GlobalProtect App Selects a Prisma Access Location for
When a mobile user connects to a Prisma Access location,
the app uses the following selection process to determine to which
location it connects.
You enable the mobile user locations where you want Prisma
Access to be present during mobile user onboarding.
If you do not select the location during onboarding, Prisma Access
does not use it in your deployment.
If the mobile user connects in a country that has a Prisma
Access location, the user connects to the location in that country.
If the mobile user cannot connect to an in-country location
for any reason, Prisma Access selects from one or more of the following
mobile user locations to connect the user based on region:
Australia & Japan
: India West, Japan Central, Singapore,
Africa, Europe & Middle East
: Finland, Germany
Central, Netherlands Central, UK
North America & South America
: Brazil South, Canada
East, US Central, US Northeast
Palo Alto Networks
recommends that you add these locations in their respective regions
during mobile user onboarding to provide redundancy.
Prisma Access has designated the following locations as alternative
(fallback) locations. If mobile users cannot access in-country or in-region
locations, Prisma Access connects mobile users to one of the following
Palo Alto Networks strongly recommends
that you enable at least one of these locations during mobile user
Palo Alto Networks recommends that you enable locations in
more than one compute location for
When mobile users connect, the GlobalProtect app does not
use the following Prisma Access locations in the automatic gateway
selection process, even if you selected the Prisma Access locations
in the plugin during onboarding. However, mobile users can still
manually select one of these locations and set it as a preferred location (gateway) as
long as you allow them to manually select those
locations during mobile user onboarding: