topic Re: Panorama managed Prisma access in Prisma Access Discussions

Panorama managed Prisma access

DeepakVerma — Mon, 13 Jun 2022 11:04:32 GMT

Hi Team ,

Is it mandatory to have Panorama in HA mode in Panorama managed Prisma access deployment mode?

what are the disadvantages if we go with standalone Panorama.

Thanks

Re: Panorama managed Prisma access

PavelK — Mon, 13 Jun 2022 23:56:46 GMT

Thank you for the post @DeepakVerma

it is not mandatory to have Panorama HA to manage Prisma Access, but it is recommended to have an HA pair. In the case of Panorama Hardware failure or while performing PAN-OS upgrade, you will not loose connectivity to Prisma. Other than this, I can't think of any disadvantage to use a standalone Panorama. Below is a link for documentation:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/license-prisma-access/configure-ha-with-a-primary-and-secondary-panorama

Kind Regards

Pavel

Re: Panorama managed Prisma access

DeepakVerma — Tue, 14 Jun 2022 03:38:21 GMT

@PavelK Thanks for confirmation.
Suppose we have vpn access (user connected to Corp network) managed using Panorama managed Prisma setup and if standalone Panorama goes down , this will impact VPN connectivity as well right ? or may be i am wrong here .

Re: Panorama managed Prisma access

PavelK — Tue, 14 Jun 2022 03:50:36 GMT

Thank you for reply @DeepakVerma

If Panorama goes down it will not impact any VPN connectivity / traffic going through Prisma. Panorama is only for management plane. If you are worried about deploying a new Panorama, then I would recommend Cloud Managed Prisma Access instead: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-release-notes/release-information/why-cloud-managed-prisma-access Using Panorama to manage Prisma Access makes more sense if you already have one in your environment or if you want to have a unified management of existing Firewalls + Prisma Access.

Kind Regards

Pavel

Re: Panorama managed Prisma access

DeepakVerma — Tue, 14 Jun 2022 04:03:57 GMT

@PavelK Thanks for your reply 🙏 ...