topic MasterDevice Configuration in Prisma Access Discussions

MasterDevice Configuration

Y.Narita347153 — Tue, 16 Sep 2025 08:19:50 GMT

Hello PaloAlto engineer Team,

I'm trying to configure the MasterDevice.

Setting the MasterDevice to CIE doesn't mean the MasterDevice settings will be applied to Prisma Access or all devices in the device group, right?

I understand that the MasterDevice just lets me know which device group the username will appear in the security policy.

https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-user-based-policy/retrieve-user-id-information/retrieve-group-mappings-using-a-master-device

Regards,

Re: MasterDevice Configuration

nikoolayy1 — Wed, 17 Sep 2025 09:29:34 GMT

Hey @Y.Narita347153 just a note this is the open tech forum for Palo Alto for users like you and me 🙂

Outside of that Prisma Access when managed through Panorama and not the Stata Cloud Manager SAAS portal auto creates in panorama a device group and template during the integration as shown in Retrieve User-ID Group Mappings for Prisma Access

You just need to select the autogenerated device group. Hope this explains your question.

Re: MasterDevice Configuration

Y.Narita347153 — Thu, 18 Sep 2025 01:03:19 GMT

Hello nikoolayy1,

Panorama already has device groups and templates.

I understand that by selecting a master device from Shared, I can display user information in the target device group and template.

This does not mean that the master device settings will be loaded into the device group and template, right?

Regards,

Re: MasterDevice Configuration

nikoolayy1 — Sat, 20 Sep 2025 10:59:45 GMT

Templates defenetly it will not but security configuration policies and rules is another thing see Master Device

Better plan your security first on the master device and also see Retrieve User-ID Group Mappings for Prisma Access as CIA can be used without a master device is an option.