How to deprovision Prisma Access Service Connection and Remote networks

Prisma Access
Prisma Access Panorama Managed
Prisma Access Strata Cloud Manager managed

Panorma Managed Prisma Access
Service Connection

1. Go to Panorama > Cloud Services > Configuration > Service Connection > Onboarding
2. Select the service connection that needs to be deprovisioned

3. If you are using hot-potato routing and have selected the service connection ( that needs to be de-provision)  as a Backup SC of another service connection, then remove it from the Backup SC first

4. Click delete at the bottom
5. Commit to Panorama
6. Push to Devices (Make sure the Prisma Access Service Setup is selected in the Push Scope)

Remote Networks

1. Go to Panorama > Cloud Services > Configuration > Remote Networks > Onboarding
2. Select the Remote Network that needs to be de-provision
3. Click delete at the bottom

4. Commit to Panorama
5. Push to Devices (Make sure the Prisma Access Remote Network is selected in the Push Scope)

Cloud Managed Prisma Access
Service Connection

1. Go to Strata Cloud Manager console from the Palo Alto Hub
2. Select Workflows > Prisma Access Setup > Service Connection 
3. Select the Service Connection that needs to be de-provision

4. If you are using hot-potato routing and have selected the service connection ( that needs to be de-provision)  as a Backup SC of another service connection, then remove from the Backup SC first from the Advanced settings

5. Click delete
6. Push the config to Service Connection

Remote Networks

1. Go to Strata Cloud Manager console from the Palo Alto Hub
2. Select Workflows > Prisma Access Setup > Remote Networks
3. Select the Remote Network that is needed to de-provision
4. Select delete

5. Push the config to the Remote Networks

For provisioning, please follow the Prisma Access guide

How to De-Provision Prisma Access Mobile Users Gateways

How to deprovision Prisma Access Explicit Proxy