Prisma Access uses gateway and portal IP addresses
for Mobile Users—GlobalProtect deployments, and authentication cache
service (ACS) and network load balancer IP addresses for Mobile Users—Explicit
Proxy deployments. Mobile Users—GlobalProtect IP addresses are known
as
egress IP addresses
. If you need to pre-allocate
mobile user IP addresses before you onboard the location (for example,
if your organization needs to add the IP addresses for Mobile Users—GlobalProtect
deployments to allow lists to give mobile users access to external
SaaS applications), you can
run an API script to
have Prisma Access pre-allocate these IP addresses for a location
ahead of time, before you onboard it. You can then add the location’s
egress IP addresses to your organization’s allow lists before onboarding
the location.