https://live.paloaltonetworks.com/t5/globalprotect-discussions/brand-new-deployment-globalprotect-vs-prisma-access-agent/m-p/1258690#M7426 <P>About to deploy a set of 1410s and trying to get some feedback on using standard GP vs going w/ PAA?&nbsp; The firewalls will be managed by an on-prem Panorama VM and be using a cloud provider for SAML authentication.&nbsp; I think I've read PAA will support using Panorama as the front-end and a standard NGFW as the device the vpn connects on.&nbsp;</P> <P>&nbsp;</P> <P>Wanted to confirm if that is correct and if there is any benefit to using it vs having a portal and 2 gateways (an HA cluster at each of 2 locations)?&nbsp;</P> Fri, 10 Jul 2026 17:08:29 GMT DJ_1924 2026-07-10T17:08:29Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/brand-new-deployment-globalprotect-vs-prisma-access-agent/m-p/1258690#M7426 <P>About to deploy a set of 1410s and trying to get some feedback on using standard GP vs going w/ PAA?&nbsp; The firewalls will be managed by an on-prem Panorama VM and be using a cloud provider for SAML authentication.&nbsp; I think I've read PAA will support using Panorama as the front-end and a standard NGFW as the device the vpn connects on.&nbsp;</P> <P>&nbsp;</P> <P>Wanted to confirm if that is correct and if there is any benefit to using it vs having a portal and 2 gateways (an HA cluster at each of 2 locations)?&nbsp;</P> Fri, 10 Jul 2026 17:08:29 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/brand-new-deployment-globalprotect-vs-prisma-access-agent/m-p/1258690#M7426 DJ_1924 2026-07-10T17:08:29Z