Skip to main content
Open

Discovery and topology mapping support for Palo Alto Prisma Access (SASE) remote networks and GlobalProtect cloud VPN

Related products:MapIntegration
  • September 17, 2026
  • 0 replies
  • 4 views

Forum|alt.badge.img+3

NetBrain discovery currently stops at the on-premises edge device (such as a Prisma SD-WAN ION or Panorama-managed firewall) and does not extend topology mapping into Palo Alto Prisma Access cloud infrastructure. As a result, the peer side of IPsec tunnels, BGP peer relationships, and remote network topology hosted within Prisma Access remain unmapped, leaving the path incomplete for both site-to-site and GlobalProtect SaaS-based VPN client connections. This enhancement would add discovery support for Prisma Access remote networks and Prisma-based GlobalProtect VPN through available cloud APIs, enabling NetBrain to retrieve tunnel peer, BGP, and routing details from the Prisma Access side and stitch this information into the existing topology map. Customers operating hybrid environments with Palo Alto SASE architecture would gain complete end-to-end path visibility for both office and remote user connectivity, reducing reliance on manual topology stitching and improving troubleshooting for VPN performance and connectivity issues.