Service IP and Egress IP Address Allocation for Remote Networks

Prisma Access has more than 100 locations available to accommodate worldwide deployments and provide a localized experience. Two locations might map to the same
Service IP address
, which you use as the peer IP address when you set up the IPSec tunnel for the remote network connection. However, the locations might use different egress IP addresses to make sure that the user gets the correct default language for the region.
The following example shows a customer deployment with two remote network locations deployed in Canada: Central Canada and Eastern Canada. Prisma Access assigned the same
Service IP Address
to both locations. When you configure the remote network tunnel, use this IP address as the peer IP address when you create the IPSec tunnel for the remote network connection.
ip-address-service-ip-address-1-6.png
However, Eastern Canada uses a different default language (French) than Central Canada (English). For this reason, Prisma Access assigns them different egress IP addresses. If you run the API script for egress IP addresses, you will receive two different IP addresses for these two locations.

Recommended For You