| PRISMA_ACCESS | On Sites | This tag enables site-wide integration of Prisma
Access. |
| PRISMA_REGION:<region-name>:<node_name> | On interfaces, Static Routes, or LAN Networks | This tag builds an IPsec tunnel to the specified
Prisma Region from the attached interface. |
| PRISMA_INCLUDE | On interfaces, Static Routes, or LAN Networks | By default, local-flagged subnets are not advertised
to Prisma Access. This tag overrides that behavior and advertises
the local-flagged networks to Prisma Access. |
| PRISMA_EXCLUDE | On interfaces, Static Routes, or LAN Networks | By default, global-flagged subnets are advertised
to Prisma Access. This tag overrides that behavior and prevents
advertisement of the global-flagged networks to Prisma Access. |
