Panorama managed Prisma access

[DeepakVerma]

Hi Team , 

 Is it mandatory to have Panorama in HA mode in Panorama managed Prisma access deployment mode?

what are the disadvantages if we go with standalone Panorama. 

Thanks 

[PavelK]

Thank you for the post @DeepakVerma

it is not mandatory to have Panorama HA to manage Prisma Access, but it is recommended to have an HA pair. In the case of Panorama Hardware failure or while performing PAN-OS upgrade, you will not loose connectivity to Prisma. Other than this, I can't think of any disadvantage to use a standalone Panorama. Below is a link for documentation:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/license-prisma-a...

Kind Regards

Pavel

[DeepakVerma]

@PavelK Thanks for confirmation. 
Suppose we have vpn access (user connected to Corp network) managed using Panorama managed Prisma setup and if standalone Panorama goes down  , this will impact VPN connectivity as well right ? or may be i am wrong here .

[PavelK · Accepted solution]

Thank you for reply @DeepakVerma

If Panorama goes down it will not impact any VPN connectivity / traffic going through Prisma. Panorama is only for management plane. If you are worried about deploying a new Panorama, then I would recommend Cloud Managed Prisma Access instead: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-release-notes/rel... Using Panorama to manage Prisma Access makes more sense if you already have one in your environment or if you want to have a unified management of existing Firewalls + Prisma Access.

Kind Regards

Pavel

[DeepakVerma]

@PavelK Thanks for your reply  🙏 ...