topic Internal Gateway Usage and MU Licenses in Prisma Access Discussions

Internal Gateway Usage and MU Licenses

mike.pochan — Mon, 21 Nov 2022 15:30:14 GMT

If we're using Prisma Access with a mix of external and internal gateways, do on-prem users authenticated to the internal gateways count against the Mobile User license? Or are only those connected to external gateways considered Mobile Users. I suspect they do not since they don't show up in the list of active Mobile Users but they also had to auth to the portal to connect to the internal gateway, so we weren't sure what actually constitutes a MU license.

Re: Internal Gateway Usage and MU Licenses

spsingh — Tue, 22 Nov 2022 20:38:36 GMT

In my opinion, the internal gateway users do not count against MU licenses.

Internal gateway users just auth and then get redirected to internal gateway from portal config. The actual services of being a Global protect user are consumed on the internal local gateway and the license is consumed on that local box. That is why if you have local gateways and you want to run HIP check or other GP license requiring services, you need to install GP license on the local gateway.