Does Prisma Access for mobile users provision a new gateway or it uses shared gateway that imports the user identity from a central repository?

[nikoolayy1]

Hello,

My question is does Prisma Access for mobile users provision a new gateway or it uses shared gateway that imports the user identity from a central repository?

The idea behind this that other cloud swg/firewall cloud vendors have a central place that has the users data for particular corporation and when the user logs in to a new cloud location that location just takes the users data from the central repository and sees how to handle the users? 

I know how to provision Prisma Access for mobile users but if someone knows what happens in the background if a separate gateway is created for each organization in a prisma access location or as I mentioned the user info is pulled from  a central place?

Really curious about this 🙂

[nikoolayy1 · Accepted solution]

After seeing some youtube clips I now know that every instance of Prisma Access SPN, CAN etc. is dedicated for the user so it is not a shared resource like the Zscaler Gateways which is a big plus. For more info and where I found this infomation, look at the clips for Palo Alto SASE:

https://www.youtube.com/watch?v=SmyxDT4gmhU&t=2528s

https://www.youtube.com/watch?v=TsUQa1hNYOk&t=2193s

https://www.youtube.com/watch?v=9UGOMhy6wu4