To create custom Prisma Access reports withinSCM, you first configure adashboardthat aggregates the relevant logs and analytics. This allows you to define the data points you want to include.
"Dashboards in SCM can be customized to include Prisma Access data sources, enabling you to create and generate reports that meet specific business and security requirements." (Source: SCM Dashboards and Reporting) Once configured, you can export the dashboard as acustom report.
"Use the dashboard's data visualization to create custom reports for Prisma Access, which can be exported as PDFs for distribution." (Source: SCM Report Customization)

The"Report and Maintenance"step of the Zero Trust model emphasizes ongoing monitoring, analysis, and reporting to ensure the environment remains secure over time.
"The Report and Maintenance phase includes continuous monitoring, log forwarding, and sharing of security telemetry to third-party tools to maintain and validate Zero Trust implementation." (Source: Zero Trust Best Practices) By forwarding logs to SOC tools, the engineer ensures comprehensive visibility and proactive threat hunting.

Client-based VPNsolutions like GlobalProtect provide full coverage for the mobile workforce by extending the enterprise security stack to remote endpoints. It establishes a secure tunnel, allowing consistent security policies across the enterprise perimeter and the mobile workforce.
"GlobalProtect is a client-based VPN that provides secure, consistent protection for mobile users by extending the security capabilities of Prisma Access to remote endpoints, covering all network protocols." (Source: GlobalProtect Admin Guide)

Adecryption policyallows the firewall to inspect encrypted traffic and apply security controls toPost- quantum Cryptography (PQC)usage, as PQC algorithms are typically implemented within encrypted sessions.
"Decryption policies enable the firewall to see and control encrypted traffic. This visibility and control extend to new cryptographic algorithms, including PQC, to ensure that security measures are applied consistently." (Source: Palo Alto Networks Decryption Overview) By decrypting sessions, you ensure that even PQC traffic can be inspected, logged, and subject to security profiles for visibility and policy enforcement.

Palo Alto Networks manages Prisma Access cloud infrastructure operations, including service upgrades and cloud-delivered updates. Administrators are responsible for managing endpoint software such as GlobalProtect client upgrades .
Reference: https://docs.paloaltonetworks.com/prisma-access/