Review the setup prerequisites for SaaS Agent Security
Where Can I Use This?
What Do I Need?
Strata Cloud Manager
SaaS Agent Security license
Or any of the following licenses that include the SaaS Agent Security license:
CASB-X
CASB-PA
SaaS Security Posture Management license
Review the prerequisites for using SaaS Agent Security. The prerequisites
describe any required supporting services and version requirements.
Services marked as Optional are not required to use SaaS Agent Security but help strengthen your security posture if you deploy them in your environment.
Prerequisite
Details
Strata Cloud Manager
AI-powered, unified platform from Palo Alto Networks that
simplifies and centralizes the management and operations of your
network security.
Included by default when you activate the SaaS Agent Security license
SaaS Security Posture Management (SSPM)
Enables SaaS Agent Security to map information to identity
names obtained from SSPM.
Allow the SSPM Identity
Security IP address for the region your tenant is deployed.
Strata Logging Service
Optional
Provides cloud-based, centralized log storage and aggregation managed
by Palo Alto Networks.
Allow the Strata Logging Service IPs and FQDNs for the region your
tenant is deployed.
Enterprise Data Loss Prevention (E-DLP)
Optional
Cloud-based service that uses AI and supervised ML algorithms to
guard against data exposures, data loss, and data exfiltration.
Allow the ports and FQDNs
required to forward traffic to Enterprise DLP, as well as the IP
addresses for additional Enterprise DLP services for the region
your tenant is deployed.
