How to deprovision Prisma Access Explicit Proxy?
1069
Created On 06/19/25 20:40 PM - Last Modified 06/20/25 18:59 PM
Objective
To guide on how to de-provision Prisma access Explicit Proxy
Environment
Prisma Access
Prisma Access Panorama Managed
Prisma Access Strata Cloud Manager managed
Procedure
Panorama Managed Prisma Access
A. If you need to de-provision the whole explicit setup
- Go to Panorama > Cloud Services > Configuration > Explicit Proxy
- Select the connection name
- Click Remove
- Commit to Panorama
- Push to Devices (Make sure the Prisma Access Explicit Proxy is selected in the Push Scope)
B. If you need to de-provision one/some locations only
- Go to Panorama > Cloud Services > Configuration > Explicit Proxy
- Double-click the connection name
- Go to the location tab
- Unselect the location/s that need to be de-provisioned and click OK
- Commit to Panorama
- Push to Devices (Make sure the Prisma Access Explicit Proxy is selected in the Push Scope)
Strata Cloud Manager Managed Prisma Access
A. If you need to de-provision the whole explicit setup
- Go to Strata Cloud Manager from the Palo Alto Hub
- Go to Workflows > Prisma Access Setup > Mobile Users
- Click Disable under >Explicit Proxy Connection
- Click ok in the warning prompt
- Push the configuration (Make Sure Mobile Users Container scope is selected under the config push scope)
B. If you need to de-provision one/some locations only
- Go to Strata Cloud Manager from the Palo Alto Hub
- Go to Workflows > Prisma Access Setup > Explicit Proxy
- Click the gear icon next to Prisma Access Locations
- Unselect the location/s that need to be de-provisioned and click Save
- Push the configuration (Make Sure Explicit scope is selected under the config push scope)
Additional Information
How to De-Provision Prisma Access Service Connection and Remote Networks
How to De-Provision Prisma Access Mobile Users Gateways
For provisioning, please follow the Prisma Access guide