10-15-2025 04:27 PM
Hi
We use Prisma Access SASE and SD-WAN. We have PAB license and we already setup PAB, we are happy about it. Now, we want to integrate the PAB with our Private APP access for remote users. Now, How can I do that ?
- we have existing Service Connection.
-do we need to configure Separate Service Connection ?
I couldnt find any documents that can help.
My Target is to setup PAB to access:
-Internet/outbound (already done , rules are applied)
-Local Apps Such as Panorama and Other APPS using PAB
10-16-2025 03:13 AM
in the Configuration > NGFW and Prisma Access > Explicit Proxy > Security Services > Security Policy ensure you have a policy that allows connections from trust to trust
also add policy to Configuration > Prisma Access Browser > Policy > Rules
and lastly, ensure your SC remote peer has a route back into the SCCAN for infrastructure IP subnet as the inbound connections will be Source NATed to an infrastructure IP
that should be all you need to do
10-16-2025 03:13 AM
in the Configuration > NGFW and Prisma Access > Explicit Proxy > Security Services > Security Policy ensure you have a policy that allows connections from trust to trust
also add policy to Configuration > Prisma Access Browser > Policy > Rules
and lastly, ensure your SC remote peer has a route back into the SCCAN for infrastructure IP subnet as the inbound connections will be Source NATed to an infrastructure IP
that should be all you need to do
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
