A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma…

When the "Overlapping Subnets" checkbox is selected during the Remote Network onboarding

process in Prisma Access, the deployment enables Private Application access using Prisma Access for

Users (ZTNA or Private Access). This feature is designed to handle scenarios where multiple sites use

the same IP subnet by leveraging NAT (Network Address Translation) and segmentation to avoid

conflicts.

Since overlapping subnets can create routing challenges for direct remote network-to-remote

network communication, Prisma Access does not support Remote Network-to-Remote Network or

Mobile User communication in this case. Private application access is supported as Prisma Access

correctly routes requests based on application-layer intelligence rather than IP-based routing.