Prisma Access

Prisma Access (Prisma VPN) is a FedRAMP approved SaaS that is similar to RESCUE. It can be configured and deployed throughout the VA and be used to connect VA Government Furnished Equipment (GFE) clients to the VA network. VA Users and contractors will use the system with an installed user agent to VPN into the VA network with GFE. They will log on using PIV credentials. Panorama GlobalProtect Portal & Cloud Identity Engine (CIE) are “Service Providers” used in Prisma Access. The SSO Request would be a Post/Redirect client authentication request to the Identity Provider (IdP). VA’s internal IdP receives the PIV credentials, not CIE or Panorama GlobalProtect Portal. CIE/Panorama GlobalProtect Portal would receive the Security Assertion Markup Language (SAML) Assertions from the IdP. Once connected, a user can access the VA network including the internet. Palo Alto Networks’ Cloud has a dedicated VA instance where Prisma can reside.

This solution supports the effort of migrating from CapEX to OpEx strategic spending, therefore eliminating hardware expenditures costs in the future.