Document:Prisma Access Integration Guide (Panorama Managed)

Onboard Branch Offices in Mainland China to Prisma Access

Filter

Onboard Branch Offices in Mainland China to Prisma Access

Onboard branch offices in mainland China to Prisma Access.

To provide secure connectivity between branch sites in China and your headquarters or data centers located outside China, use this workflow to use a Prisma Access remote network and Alibaba Cloud to onboard branch offices located in mainland China.

You are responsible for complying with Chinese regulations. VPNs must run on sanctioned providers’ infrastructure, such as Alibaba cloud. Do not use VPNs to access any content that has been banned by the Chinese government. You must assume responsibility to implement appropriate security policies that prevent access to any banned content (for example, disallow mobile users in China to perform a Google search outside of China). You must use this solution to provide secure access to business and corporate applications only, including private and approved SaaS applications. Palo Alto Networks recommends that you consult with your organization’s legal department before deploying this solution.

Connect Your Remote Network in Mainland China to Prisma Access

Configure the Remote Nework in Prisma Access

Set up the Alibaba Cloud Infrastructure

Configure the Linux Instances as Routers

Configure the Customer Premises Equipment at Your Branch Site