Prisma Access folders are predefined; you can use them to specify configuration scope and ensure that Prisma Access deployment types – mobile users, remote networks, and service connections – receive all global settings and then settings that are required or specific for each type.

The configurations defined under a folder are inherited by all folders nested under that folder hierarchy. For example, you can configure settings that are common across GlobalProtect, Explicit Proxy, Remote Networks, and Service Connections under the Prisma Access folder. Similarly, you can configure settings that are common across GlobalProtect and Explicit Proxy under the Mobile Users Container and so on.

You cannot edit the folder hierarchy for Prisma Access.

At the folder level, you can also enable web security for the Prisma Access mobile user, remote network, or service connection deployment.