Organizations often face administrative and security challenges managing firewall exceptions and allow lists for the existing AWS S3-hosted PAC file. Prisma^® Access solves this problem by rolling out a new, simplified PAC file endpoint hosted directly by Palo Alto Networks, significantly reducing administrative overhead and simplifying access.

This change is designed to make it easier for you to enable access to PAC files and will be automatically reflected when you modify your PAC file.

If you are using GlobalProtect ^® in proxy mode or tunnel and proxy mode, and your devices cannot access all domains under prismaaccess.com (due to a third-party VPN split tunnel or firewall rule), allow your devices to access the new PAC file endpoint (store.swg.prismaaccess.com) to avoid interruptions. For full migration instructions, including required IP addresses and steps for overriding the PAC File URL in GlobalProtect® App Settings, you can refer the PAC file guidelines.