Prisma Access Mobile User Deployments
Learn about the different mobile user deployment types
in Prisma Access.
If you determine that your deployment would benefit by having
some users connect using GlobalProtect and some users connect using
an Explicit Proxy, Prisma Access allows you to distribute the users in
your GlobalProtect for Users license between Mobile Users—GlobalProtect
and Mobile Users—Explicit Proxy. However, users cannot connect using
GlobalProtect and an explicit proxy from the same endpoint.
Secure Mobile Users with GlobalProtect—If your
goal is to secure mobile users’ access to all applications, ports,
and protocols, and to get consistent security whether the user is
inside or outside your network, use Mobile Users—GlobalProtect.
The GlobalProtect infrastructure is deployed for you and scales
based on the number of active users and their locations. After you
complete the configuration, users then connect to the closest Prisma
Access gateway (location) you have onboarded for policy enforcement.
This enables you to enforce consistent security for your users even
in locations where you do not have a network infrastructure and
IT presence.
The GlobalProtect app installed on the users'
endpoint secures users traffic to internet, SaaS applications, your
internal and public cloud resources.
Secure Mobile Users with an Explicit Proxy—If your
organization has designed its network around an explicit proxy design,
the explicit proxy connect method will help you quickly replace
the existing method and move to the Prisma Access Secure Access
Service Edge (SASE) solution. You can then send internet and external
SaaS application traffic to the Prisma Access infrastructure and
enforce security in the cloud.
With an explicit proxy, you
configure a proxy URL and a Proxy Auto-Configuration (PAC) file. The
GlobalProtect app is not required to be installed on the users’ endpoints.
