I want to know the difference between GlobalProtect and Prisma Access Agent

[Y.Choi436432]

Hi

While looking at the docs for Palo Alto GP and Prisma Access Agent, I had a question.

For convenience, we will refer to Prisma Access Agent as PAA.

Can someone explain the crucial differences that differentiate GP and PAA?

If we look at it only in terms of simple functions, PAA seems like it could replace GP.

Should the two products be considered separate products, or should PAA be considered a superior product that ultimately replaces GP?

If anyone could give me a hint I would appreciate it

[nikoolayy1]

What I know the Prisma Access agent to have in enpoint DLP as to download rules and enforce them locally and it also supports Dynamic Priviliged access. Other than that it should allow ADEM for even when you connect through NGFW not only Prisma Access. You can also ask chatgpt for extra comparission and check it's responses 😉

How Does Endpoint DLP Work?

 Configure Dynamic Privilege Access Settings

Prisma Access Agent

[JayGolf]

Hi @Y.Choi436432 ,

In short, the Prisma Access Agent is intended to replace GlobalProtect as the primary unified agent. During the transition, PAA and GlobalProtect can coexist on the same endpoint and tenant. However, only one agent can be actively connected to Prisma Access at a given time...

As far as differences, PAA so far provides anti-tampering, like @nikoolayy1 mentioned endpoint DLP, complete always-on enforcement, cloud-based management, enterprise-scale traffic steering with simplified forwarding profiles, and improved endpoint insights to assist with troubleshooting.

So yes, one could say PAA is superior to GP (: