10-06-2025 05:25 PM
Hi @Y.Choi436432 ,
In short, the Prisma Access Agent is intended to replace GlobalProtect as the primary unified agent. During the transition, PAA and GlobalProtect can coexist on the same endpoint and tenant. However, only one agent can be actively connected to Prisma Access at a given time...
As far as differences, PAA so far provides anti-tampering, like @nikoolayy1 mentioned endpoint DLP, complete always-on enforcement, cloud-based management, enterprise-scale traffic steering with simplified forwarding profiles, and improved endpoint insights to assist with troubleshooting.
So yes, one could say PAA is superior to GP (:
