Prisma Access 1.7 is here!

[esafdia]

Introducing Prisma Access Release 1.7Introducing Prisma Access Release 1.7

Prisma Access Release 1.7 is Here!

The Prisma Access 1.6 release focused on DLP, Secure Inbound Access, and other feature enhancements for the Prisma Access platform.

Since then, we have been working hard on expanding Prisma Access capabilities, including PAN-OS 9.1 support, new traffic steering functionality, adding a new compute location, and other enhancements! 

Follow these instructions to Activate and Install Prisma Access Cloud Services plugin 1.7 and activate these features.

Prisma Access 1.7 includes the following capabilities:

1. PAN-OS 9.1 Support
   • GlobalProtect Logs
   • GlobalProtect ACC
   • GlobalProtect Reports
   • Tag Based Application Filters
   • Username HTTP Header Insertion
2. Dynamic User Group and Tagging
3. GlobalProtect App Versioning
4. Traffic Steering
5. Mobile User IP Pool Summarization
6. South Africa Compute Region
7. Mobile User WINS Support
8. Service Notifications and Alerts

We are highlighting a few capabilities in this blog. For details on all enhancements, please refer to the Prisma Access Release Notes (Panorama Managed). 

PAN-OS 9.1 Support - GlobalProtect Logs

With this feature, all GlobalProtect user connection events are logged in a dedicated GlobalProtect log. All events for every stage of the connection workflow are logged, providing visibility into user before-login, login and configuration stages, other information such as errors and connection duration are also logged. 

PAN-OS 9.1 Support - GlobalProtect Application Command Center

Screenshot of GlobalProtect inside of the ACC

Screenshot of GlobalProtect inside of the ACC

Available under ACC > GlobalProtect Activity, you can now monitor successful connections, unsuccessful connection attempts, and overall GlobalProtect deployment using these new dashboards. For example, you can easily view all connections attempted or established with the users' source location for a selected time filter. 

South Africa Compute Location

A new compute location is now available in South Africa and mapped to the South Africa West location. This will improve latency for local internet and private application access for customers using the South Africa West location.

Traffic Steering

Traffic steering with default route

Traffic steering with default route

With Traffic Steering, you can now choose to route some or all Internet-bound traffic through your data center using a default route or Policy Based Forwarding (PBF). This allows you to leverage your existing hardware investments or capture/audit traffic for compliance and regulatory purposes. The default route applies only to mobile users and allows you to accept and install default routes from your service connections. Policy Based Forwarding is applicable to both mobile users and remote networks. Using PBF you can steer traffic based on a variety of criteria including source address, USER-ID, URL Category, etc.

Mobile User IP Pool Summarization

Prior to Prisma Access 1.7, mobile user pools were broken up into multiple /24 prefixes and assigned to the gateway. As these prefixes are advertised to your backbone, this can increase the size of the route table on your on-premise equipment. With this feature enabled, Prisma Access will advertise provisioned mobile user pools and not the /24 blocks.

Prisma Access Insights

Screenshot from Prisma Access Insights

Screenshot of Prisma Access Insights

Along with all of these other features, Prisma Access 1.7 also allows you to use Prisma Access Insights.

To get all of the details about that please see this blog:

Introducing Prisma Access Insights

More Info

For more info, please follow these instructions to Activate and Install Prisma Access Cloud Services plugin 1.7 and activate these features.

For details on all enhancements, please refer to the Prisma Access Release Notes (Panorama Managed). 

Thanks for reading.