Focus

Prisma Agent

Prisma Agent Prerequisites

Table of Contents

Configuration Management Overview for NGFW Support for Prisma Agent

Prisma Agent Prerequisites

Learn about the prerequisites for the Prisma Agent.

Where Can I Use This?	What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) Prisma Access (Managed by Panorama) NGFW (Managed by Panorama)	Check the prerequisites for the deployment you're using

Learn about the prerequisites for the Prisma Agent, including the supported OS versions, the hardware resource utilization, the minimum supported version of Prisma Access, and the supported NGFW versions. Learn about using Cloud Identity Engine for user authentication.

You can also check the prerequisites for the deployment you're using.

For Prisma Agent deployments on Prisma Access, be sure to:

Purchase a valid Prisma Access license with a Mobile User license subscription.
Activate Prisma Access and claim the licenses that you purchased.
Set up Prisma Access.

You will also need to activate the licenses for Strata Logging Service and Cloud Identity Engine.

For Prisma Agent licensing and activation on NGFW, review the information in NGFW Support for Prisma Agent.

What Prisma Access Versions Are Supported for Prisma Agent

The Prisma Agent can coexist with the GlobalProtect™ app on a Prisma Access tenant (instance).

The following minimum Prisma Access versions are required. For required PAN-OS versions, see What PAN-OS Versions Are Supported.

Prisma Agent Version	Prisma Access Version
25.6.1 and later	5.1 Preferred or Innovation Portal authentication for Panorama Managed Prisma Access and NGFW deployments requires Prisma Access infrastructure 6.1 and above.
25.6 and earlier	5.1 Preferred or Innovation

For coexistence tenants, be sure to configure GlobalProtect, including the GlobalProtect portal, before you configure the Prisma Agent.

What PAN-OS Versions Are Supported for Prisma Agent

The following PAN-OS versions are supported for Prisma Access or NGFW deployments:

Prisma Agent Version	PAN-OS Version
All versions	PAN-OS 11.2.7-h17 and above PAN-OS 10.2.10-h39, 10.2.17 and later 10.2 versions

What NGFWs Are Supported for Prisma Agent

The following are required for Prisma Agent deployments on NGFW:

Prisma Agent license for NGFW deployments

PAN-OS versions:

Prisma Agent Version	PAN-OS Version
All versions	PAN-OS 11.2.7-h17 and above PAN-OS 10.2.10-h39, 10.2.17 and later 10.2 versions

What OS Versions Are Supported for the Prisma Agent App

Review the supported operating system versions for the Prisma Agent.

The Prisma Agent is supported on devices that run the following operating systems:

Operating System	Version	Platform	First Supported Prisma Agent Release
Android	Android OS 10 and later Android 16 Android 17	N/A	25.3 for Android 10 and later 26.2.2 for Android 16 26.3 for Android 17
iOS	iOS 16 and later iOS 26	N/A	25.3 for iOS 16 26.2.2 for iOS 26
macOS	macOS 14 and later macOS 26 macOS 27	Mac x86_64 and Mac ARM (M*)	25.1 25.6.1 for macOS 26 26.3.3 for macOS 27
Windows	Windows 10 version 2004 and later	Windows x86 and Windows x86_64	25.1
Ubuntu	22.04, 24.04, and 26.04	x86_64 and ARM64	25.7 for Ubuntu 22.04 and 24.04 26.3 for Ubuntu 26.04
Arch Linux	Rolling release	x86_64 and ARM64	25.7
Debian	13	x86_64 and ARM64	25.7.1
Fedora*	42 and 43	x86_64 and ARM64	25.7 for Fedora 42 26.2 for Fedora 43
NixOS	Rolling release (support from 25.11)	x86_64 and ARM64	26.2
Oracle Linux	9.7	x86_64 and ARM64	26.2
Red Hat Enterprise Linux**	9.8 and 10.2	x86_64 and ARM64	26.4

For desktop operating systems such as macOS and Windows, you can install the Prisma Agent on an endpoint that already has the GlobalProtect app installed. The end users can switch between the Prisma Agent and GlobalProtect app.

For Linux distributions, Prisma Agent supports the GNOME and KDE desktop environments as well as Wayland and X11 display servers.

On RHEL 10, Fedora 43 and 44, Ubuntu 26.04, Arch Linux, and NixOS, X11 sessions are not available at the desktop login screen. These distributions have removed the X11 server entirely. GNOME on these platforms is Wayland-only. X11 applications continue to run through XWayland.

*Support for Fedora 41 was dropped in Prisma Agent version 26.2.

**Support for Red Hat Enterprise Linux 9.6 and 10.0 was dropped in Prisma Agent version 26.4.

Container traffic enforcement on Linux requires kernel 5.11 or later (Prisma Agent 26.3). Run uname -r to check your kernel version. Arch Linux ARM (aarch64) endpoints may need to verify BTF support and recompile the kernel before using this feature.

Prisma Agent Hardware Resource Utilization

Review the typical memory and disk space that the Prisma Agent uses on Windows and macOS endpoints.

When you plan your Windows and macOS deployments, you can use the resource utilization of the Prisma Agent on each platform to help you prepare your endpoints.

These values reflect typical usage and are not minimum system requirements. Your actual resource usage can differ depending on your endpoint hardware, configuration, and the features you enable.

Resource Utilization for Prisma Agent on Windows

Use the following table as a general guide to how much memory and disk space Prisma Agent typically uses on Windows endpoints:

Resource	Typical Usage
RAM	200 MB
Hard disk space	1.5 GB

Resource Utilization for Prisma Agent on macOS

Use the following table as a general guide to how much memory and disk space Prisma Agent typically uses on macOS endpoints:

Resource	Typical Usage
RAM	200 MB
Hard disk space	1.5 GB