Some legacy networks use IP address-based authorization to restrict users’ access to internal or external resources. A Prisma® Access Mobile Users—GlobalProtect® deployment assigns users an IP address from the mobile users IP address pool you assign during onboarding, and this user-to-IP address mapping can change in subsequent logins. To retain user-to-IP address mapping, Prisma Access lets you assign static IP addresses to users. With this feature, Prisma® Access allows you to allocate IP addresses to users based on the User or User-group, along with Theatre and Location groups.

Prisma Access adds the following enhanced functionality for static IP address allocation: support for iOS and Android mobile devices and support for RFC6598 addresses.