>
    Strata Copilot
    Configure Gateways for the Prisma Agent
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Agent
    3. Configure the Prisma Agent
    4. Set Up the Prisma Agent
    5. Configure Gateways for the Prisma Agent
    Download PDF
    Prisma Agent

    Configure Gateways for the Prisma Agent

    Table of Contents

    Configure Gateways for the Prisma Agent

    Configure gateways to provide security enforcement for traffic from Prisma Agents.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • NGFW (Managed by Panorama)
    Gateways provide security enforcement for traffic from Prisma Agents. Additionally, if the host information profile (HIP) feature is enabled, the gateway generates a HIP report from the raw host data that the endpoints submit, which it can use for policy enforcement.
    Prisma Agent supports the following types of gateways:
    • Internal—An internal gateway is an interface on the internal network that is configured as a gateway and applies security policies for internal resource access. When used with HIP checks, an internal gateway can be used to provide a secure, accurate method of identifying and controlling traffic based on user state, device state, or both. Internal gateways are useful in sensitive environments where authenticated access to critical resources is required. The Prisma Agent connects to the internal gateway after performing internal host detection to determine the location of the endpoint. If internal host detection isn't configured, the Prisma Agent first connects to the internal gateway followed by the external gateway upon connection failure.
    • External gateway—An external gateway resides outside of the corporate network and provides security enforcement, tunnel access, or both for your remote users. By default, the Prisma Agent automatically connects to the Best Location external gateway, based on the priority you assign to the gateway, source region, and the response time.
    After configuring the agent app settings, you can add the gateways that users can select in the Prisma Agent.
    By default, all the gateways in your Prisma Access locations are available to users. If you have on-premises gateways (internal or external) that you want your users to connect to, you can add those gateways here.
    You can configure gateways for Prisma Access or NGFW deployments.

    © 2026 Palo Alto Networks, Inc. All rights reserved.