Access Your Data Center Using Explicit Proxy (Strata Cloud Manager)

1. Configure a service connection in Prisma Access.
2. Configure DNS settings.
3. Ensure that the DESTINATION Zones for internet-bound traffic is set to untrust instead of any.

   Failure to perform this step could result in unintended access to your data center.

   1. Select ManageConfigurationNGFW and Prisma AccessConfiguration ScopeFoldersPrisma AccessMobile Users ContainerExplicit ProxySecurity ServicesSecurity Policy.
   2. Open a rule for internet-bound traffic.
   3. Ensure Zones under DESTINATION is set to untrust.

   4. Repeat for all of your internet-bound traffic rules.
4. Enable private application access.

   1. Select WorkflowsPrisma Access SetupExplicit Proxy Infrastructure Settings

      Enable Private App Access for Explicit Proxy.

5. Create security policy rules for the data center resources you want to access.

   1. Select ManageConfigurationNGFW and Prisma AccessConfiguration ScopeFoldersPrisma AccessMobile Users ContainerExplicit ProxySecurity ServicesSecurity Policy.
   2. Create security policy rules.

   In rules for data center access, ensure Zones under DESTINATION is set to trust.