Prisma Access uses 
SC-NAT support with Dynamic Privilege Access
                    (DPA) to enforce service connections for access to private applications
                in your data center or headquarters. When you have multiple projects in your DPA
                environment, your network can experience IP address exhaustion when IP addresses in
                your infrastructure subnet overlap. SC-NAT support enables Prisma Access to
                implement source NAT (SNAT) for IP addresses to provide the following benefits: