On Panorama, when configuring Prisma Access, "Internal Host Detection" is seen at two locations
We only use the first option for onboarding. Once on board, use the second option for all further changes. This is to support a variety of customer installations. The value provided during onboarding is reflected under "DEFAULT" Agent config. This is to support simple configuration with one agent config.
The Panorama interface also supports adding multiple agent configs based on user groups or device types. The above second option provides the ability to add "Internal Host Detection" configuration for each agent config. Refer to "Step 2" of the following URL for this config: Configure Prisma Access for Users.