Service Connection Deployment - Prisma Access Side - Detailed Walkthrough

In this video, we perform a full, step-by-step deployment of a Service Connection (SC) from the Prisma Access side, focusing on real configuration, not theory or slides.

This is a hands-on walkthrough where we configure the Service Connection exactly as it would be done in a real environment (using static routes), while explaining every setting along the way.

What You Will See in This Video:

• Creating and configuring a Service Connection in Prisma Access (Strata Cloud Manager)

• Clear explanation of each configuration option and why it exists

• How Prisma Access uses Service Connections to reach on-premises resources

• Recommended best practices based on real-world deployments

• Common configuration mistakes and how to avoid them

• Key design considerations before going to production

What This Video Is Not:

• No PowerPoint or slide-based explanations

• No high-level marketing diagrams

• No repetition of official Palo Alto Networks training material

This video is designed to complement official Palo Alto Networks training by showing how Service Connections are actually deployed in practice.

Prerequisites / Assumptions:

• Basic familiarity with Prisma Access concepts

• General understanding of public cloud concepts

• Access to a Prisma Access tenant (lab, PoC, or production) - not required but desirable

• General understanding of networking and firewall fundamentals

How to Use This Video:

We recommend watching the full walkthrough once, then rewatching it while following along in your own environment.
Pause as needed and validate each step before moving forward.

This approach helps build confidence and reduces mistakes during real deployments.

Tip:

If this is your first Service Connection deployment, do not skip any steps — small misconfigurations can cause large connectivity issues later.

Service Connection Deployment - Remote Data Center Side - Detailed Walkthrough

In this video, we perform a full, step-by-step deployment of a Service Connection (SC) from the Remote Data Center (on-premises) side, focusing on the Next-Generation Firewall (NGFW) configuration required to integrate with Prisma Access.

This is a hands-on walkthrough where we configure the on-premises firewall exactly as it would be done in a real environment (using static routes, not BGP), while explaining every setting and design choice along the way.

What You Will See in This Video:

• Preparing the on-premises NGFW for a Service Connection

• Configuring tunnels, interfaces, routing, and security policies

• How the on-premises firewall integrates with Prisma Access Service Connections

• Explanation of each configuration option and why it is required

• Recommended best practices for stability, scalability, and security

• Common misconfigurations and how to avoid them

• Real-world design considerations for production deployments

What This Video Is Not:

• No PowerPoint or slide-based explanations

• No theory-only lectures

• No repetition of official Palo Alto Networks training material

This video is designed to complement official Palo Alto Networks training by showing how the on-premises side of a Service Connection is actually deployed.

Prerequisites / Assumptions:

• Basic understanding of Prisma Access Service Connections

• Access to an on-premises Palo Alto Networks NGFW - not required but desirable

• Familiarity with routing, IPsec tunnels, and security policies

• A Prisma Access tenant (lab, PoC, or production)

How to Use This Video:

We recommend watching the entire walkthrough once, then rewatching it while configuring your own on-premises firewall.

Pause frequently, validate tunnel status and routing, and confirm traffic flow before moving forward.

This approach helps avoid issues that are often difficult to troubleshoot later.

Tip:

This video is best watched after the Service Connection Deployment – Prisma Access Side walkthrough, as both sides must align for a successful deployment.

Remote Network Deployment - Prisma Access Side - Detailed Walkthrough

In this video, we perform a full, step-by-step deployment of a Remote Network (RN) from the Prisma Access side, focusing on how branch or remote locations securely connect into Prisma Access.

This is a hands-on walkthrough where we configure the Remote Network exactly as it would be done in a real environment, while explaining every setting, option, and design decision along the way.

What You Will See in This Video:

• Creating and configuring a Remote Network in Prisma Access (infrastructure, Prisma Access Locations, DNS, IP pool, policy, etc) - Using Strata Cloud Manager

• Explanation of each configuration option and why it exists

• How Prisma Access uses Remote Networks to securely onboard branch locations

• Recommended best practices for routing, segmentation, and availability

• Common configuration mistakes and how to avoid them

• Real-world design considerations before going to production
  

What This Video Is Not:

• No PowerPoint or slide-based explanations

• No theory-only lectures

• No repetition of official Palo Alto Networks training material

This video is designed to complement official Palo Alto Networks training by showing how Remote Networks are actually deployed in practice.

Prerequisites / Assumptions:

• Basic familiarity with Prisma Access concepts

• Access to a Prisma Access tenant (lab, PoC, or production) - not required but desirable

• General understanding of networking fundamentals, public cloud concepts and IPsec tunnels

How to Use This Video:

We recommend watching the entire walkthrough once, then rewatching it while following along in your own environment.

Pause as needed, validate configuration choices, and confirm connectivity before moving forward.

This approach helps build confidence and avoids common deployment issues.

Tip:

This video pairs best with the Remote Network Deployment – On-Premises NGFW Side walkthrough, where the branch firewall configuration is completed.

Remote Network Deployment - Remote Branch Side - Detailed Walkthrough

In this video, we perform a full, step-by-step deployment of a Remote Network (RN) from the Remote Branch (on-premises) side, focusing on the Next-Generation Firewall (NGFW) configuration required to securely connect a branch location to Prisma Access.

This is a hands-on walkthrough where we configure the branch firewall exactly as it would be done in a real production environment, while explaining every setting, dependency, and design decision along the way.

What You Will See in This Video:

• Preparing the branch NGFW for a Remote Network connection

• Configuring IPsec tunnels, interfaces, routing, and security policies

• How the branch firewall integrates with Prisma Access Remote Networks

• Explanation of each configuration option and why it is required

• Recommended best practices for stability, scalability, and security

• Common misconfigurations and how to avoid them

• Real-world considerations for branch and remote site deployments
  

What This Video Is Not:

• No PowerPoint or slide-based explanations

• No theory-only lectures

• No repetition of official Palo Alto Networks training material

This video is designed to complement official Palo Alto Networks training by showing how the Remote Network branch side is actually deployed in practice.

Prerequisites / Assumptions:

• Basic understanding of Prisma Access Remote Networks

• Access to a branch Palo Alto Networks NGFW - not required but desirable

• Familiarity with routing, IPsec tunnels, and security policies

• A Prisma Access tenant (lab, PoC, or production)

How to Use This Video:

We recommend watching the entire walkthrough once, then rewatching it while configuring your own branch firewall.

Pause frequently, verify tunnel status, routing behavior, and policy enforcement before moving forward.

This approach helps prevent issues that can be time-consuming to troubleshoot later.

Tip:

This video is best watched after the Remote Network Deployment – Prisma Access Side walkthrough, as both sides must align for a successful deployment.

Mobile Users - GlobalProtect Deployment - Detailed Walkthrough

In this video, we perform a full, step-by-step deployment of Mobile Users using GlobalProtect (GP) within Prisma Access, focusing on how remote users securely connect to corporate resources from anywhere.

This is a hands-on walkthrough where we configure Mobile Users exactly as it would be done in a real environment, while explaining every setting, flow, and design decision along the way.

What You Will See in This Video:

• Configuring Mobile Users – GlobalProtect in Prisma Access - Strata Cloud Manager (two Prisma Access locations in EU and Americas)

• Explanation of each configuration option and why it exists

• How user traffic flows through Prisma Access using GlobalProtect

• How GlobalProtect agent selects a Prisma Access location/gateway to connect to

• Authentication, security policy, and access control considerations

• Recommended best practices for security, scalability, and user experience

• Common configuration mistakes and how to avoid them

• Real-world design considerations for production deployments

• Testing and validation from a desktop computer

What This Video Is Not:

• No PowerPoint or slide-based explanations

• No theory-only lectures

• No repetition of official Palo Alto Networks training material

This video is designed to complement official Palo Alto Networks training by showing how Mobile Users are actually deployed in real environments.

Prerequisites / Assumptions:

• Basic familiarity with Prisma Access concepts

• General understanding of GlobalProtect

• General understanding of public cloud concepts

• Access to a Prisma Access tenant (lab, PoC, or production) - not required but desirable

• Familiarity with authentication concepts (for example: identity providers, certificates, or user directories)

How to Use This Video:

We recommend watching the full walkthrough once, then rewatching it while following along in your own environment.

Pause as needed, validate authentication and connectivity, and confirm traffic flow before moving forward.

This approach helps ensure a smooth user experience and avoids common deployment issues.

Tip:

Mobile Users deployments often touch multiple areas (identity, policy, routing, and security).
Take your time and validate each step before moving forward.