Prisma Access uses gateway and portal IP addresses
for Mobile Users—GlobalProtect deployments, and authentication cache
service (ACS) and network load balancer IP addresses for Mobile
Users—Explicit Proxy deployments. Mobile Users—GlobalProtect IP
addresses are known as
egress IP addresses
. If
you need to pre-allocate mobile user IP addresses before you onboard
the location (for example, if your organization needs to add the
IP addresses for Mobile Users—GlobalProtect deployments to allow
lists to give mobile users access to external SaaS applications),
you can
run an API script to
have Prisma Access pre-allocate these IP addresses for a location
ahead of time, before you onboard it. You can then add the location’s
egress IP addresses to your organization’s allow lists before onboarding
the location.