A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B)…

The solution requires distinct components for different connection types. GlobalProtect is the designated Prisma Access component for securing mobile users, enabling internet filtering, and providing access to both data center and other remote sites. Remote Networks are used to connect physical branch locations to the Prisma Access cloud via IPsec tunnels for secure internet and data center access. To facilitate connectivity from both mobile users and remote networks back to the customer's data centers, Service Connections are required. This combination correctly addresses all requirements for the specified user and site types.

B: Explicit Proxy is primarily for web security and does not provide the full-tunnel network access needed for mobile users or address branch connectivity. C: This option omits the Remote Networks component, which is essential for connecting the branch locations as required by the scenario. D: Explicit Proxy is not the appropriate solution for mobile users who need access to non-web applications in the data center and branch-to-branch connectivity.

1. Palo Alto Networks TechDocs, Prisma Access Fundamentals Guide. In the section "Prisma Access Components," the guide explicitly defines the roles of each component:

Mobile users: "To secure your mobile and remote workforce, you install the GlobalProtect app on your users’ endpoints..."

Remote networks: "To secure your branch and retail offices, you onboard them as remote networks by establishing an IPsec tunnel between your customer premises equipment (CPE) and Prisma Access."

Service connections: "To provide your mobile users and remote networks with access to your internal resources, you onboard your headquarters or data centers as service connections."

Source: Palo Alto Networks. (2024). Prisma Access Fundamentals Guide. docs.paloaltonetworks.com. Retrieved from https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-fundamentals/prisma-access-components

2. Palo Alto Networks TechDocs, Prisma Access Administrator’s Guide (Cloud-Managed). The "Prisma Access Onboarding and Configuration Workflow" outlines the distinct steps for configuring each element, confirming their separate functions: "Onboard Service Connections," "Onboard Remote Networks," and "Onboard Mobile Users." This workflow validates that GlobalProtect (Mobile Users) and Remote Networks are the correct, distinct solutions for their respective use cases, both leveraging Service Connections for data center access.

Source: Palo Alto Networks. (2024). Prisma Access Administrator’s Guide (Cloud-Managed). docs.paloaltonetworks.com. Retrieved from https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-admin-cloud-managed/get-started-with-prisma-access/prisma-access-onboarding-and-configuration-workflow