Prisma Access ZTNA Connector Virtual Appliance

Use the following workflow to enable the ZTNA Connector in cloud-managed Prisma Access.

1. Configure the IP address block that Prisma Access will use internally to route traffic to the ZTNA connector and the dedicated application you have installed. You must define separate IP address blocks for your connectors and applications, and these blocks must not overlap with each other, the Prisma Access infrastructure subnet, or your GlobalProtect IP address pool. Select Set up Prisma Access settings to share and edit infrastructure settings. If you're using Strata Cloud Manager, go to the workflow Prisma Access settings Prisma Access infrastructure settings.

2. Add the ZTNA Connectors application IP block. You can add a single application IP block or multiple blocks, depending on your deployment. For example, enter 100.64.10.0/24 and 100.64.11.0/24. You can also advertise application IP blocks to remote networks to provide remote network access. Add ZTNA connector connector IP blocks, and Prisma Access will use these IP blocks internally to route traffic between mobile users, remote networks, and connector virtual machines in the data center. You can add a single connector IP block or multiple blocks, depending on your deployment. For example, enter 100.65.10.0/24 and 100.65.11.0/24.

3. Click Save to save the IP address block configuration, and then click Submit to push the configuration. Launch the ZTNA Connector from the Prisma SASE platform. Sign in to the Prisma SASE Platform. Select Set up ZTNA Connector.

4. If you're using Strata Cloud Manager, go to Workflow ZTNA Connector. Prisma Access begins setting up the infrastructure for the ZTNA Connector. This may take a few minutes.

5. Once setup is complete, the ZTNA Connector Overview will be displayed. CTF link: https://ztna-connector-cfts.s3.eu-west-2.amazonaws.com/AMI-Final-600-627-zc-b8/AWS-PA-ZTNA-Connector-1ARM.yaml