Prisma Access
Cloud-delivered security service from Palo Alto Networks with ZTNA and network security, part of Prisma SASE.
Technical Architecture & Overview
Prisma Access is the cloud-delivered security service in the Palo Alto Networks Prisma SASE portfolio, which also includes Prisma SD-WAN and Autonomous Digital Experience Management (ADEM). ZTNA Connector gives mobile and branch users access to private applications through automatically created tunnels. Strata Cloud Manager can enforce a shared security policy across Prisma Access and the company NGFWs. Users connect through the Prisma Agent or the Prisma Access Browser.
Targeted Technical Use Cases
Organizations standardizing on Palo Alto Networks that want SASE under the same policy model.
Evaluation & Trade-offs
Core Strengths
- +Shared security policy with Palo Alto NGFWs through Strata Cloud Manager.
- +Pairs with Prisma SD-WAN in the Prisma SASE portfolio for branch sites.
- +ZTNA Connector sets up tunnels to private apps without manual IPsec configuration.
Trade-Offs & Limitations
- -ZTNA Connector counts are capped by license: 10 in the base license, up to 200 with an add-on.
- -Shared policy with firewalls assumes Palo Alto NGFWs managed in Strata Cloud Manager.
Defensive Security Application
Least-privileged access to private applications with cloud-delivered threat prevention.
Frequently Asked Questions
What is Prisma Access?→
Prisma Access is the cloud-delivered security service in the Palo Alto Networks Prisma SASE portfolio, which also includes Prisma SD-WAN and Autonomous Digital Experience Management (ADEM). ZTNA Connector gives mobile and branch users access to private applications through automatically created tunnels. Strata Cloud Manager can enforce a shared security policy across Prisma Access and the company NGFWs. Users connect through the Prisma Agent or the Prisma Access Browser.
What is Prisma Access used for?→
Organizations standardizing on Palo Alto Networks that want SASE under the same policy model.
What are the strengths of Prisma Access?→
- +Shared security policy with Palo Alto NGFWs through Strata Cloud Manager.
- +Pairs with Prisma SD-WAN in the Prisma SASE portfolio for branch sites.
- +ZTNA Connector sets up tunnels to private apps without manual IPsec configuration.
What are the limitations of Prisma Access?→
- +ZTNA Connector counts are capped by license: 10 in the base license, up to 200 with an add-on.
- +Shared policy with firewalls assumes Palo Alto NGFWs managed in Strata Cloud Manager.
How is Prisma Access used defensively?→
Least-privileged access to private applications with cloud-delivered threat prevention.