Deploying Palo Alto Prisma Access Zero Trust

When to Use

• When implementing enterprise-grade SASE with integrated ZTNA, SWG, CASB, and FWaaS
• When replacing both VPN and branch office firewalls with cloud-delivered security
• When needing advanced threat prevention (WildFire, DNS Security) for remote access traffic
• When deploying zero trust for both mobile users and remote network (branch) connections
• When integrating ZTNA with existing Palo Alto NGFW infrastructure via Strata Cloud Manager

Do not use for small organizations (< 200 users) where simpler ZTNA solutions suffice, for environments requiring only web application access without full network security, or when budget constraints preclude enterprise SASE licensing.

Prerequisites