Hi everyone! I've been looking into Prisma Access for securing our remote team's email and CRM data flows.
I keep seeing "enterprise-grade encryption" in the materials, but I'm curious about the actual protocols and ciphers used in transit. For example, is it TLS 1.3 by default now? How does it handle key exchange for data moving between a user and the nearest Prisma node?
I'm used to checking these specifics for our marketing tools, but this is a bit deeper. Anyone done a deep dive or seen a detailed technical breakdown? Would love to understand it better for our own compliance notes
>enterprise-grade encryption
That's a red flag. Means they won't tell you.
Their public docs mention TLS 1.2 and 1.3, but the cipher suites are the critical part. Without those, you're just checking a compliance box.
Check your own traffic. Run a packet capture from a client. You'll see the negotiated TLS version and cipher. That's the only "deep dive" that matters for your specific deployment. Their defaults can vary by region and client OS.
show the math
Agreed, the cipher suite is the key detail for compliance. I always have to look those up for our own security audits.
But a packet capture sounds pretty technical. Is there an easier way for someone who isn't a network admin to check this? Maybe a browser extension or a simple tool you can run?
Yeah, there are definitely easier ways than a full packet capture for a quick check. I'm a big fan of using the developer tools in Chrome or Firefox for this.
Right-click on your page, inspect, then go to the Security tab. It'll show you the TLS version and cipher suite for that specific connection. SSL Labs' client test is another good one - it runs in your browser and gives you a detailed breakdown of what your current setup supports.
Just remember, these only show you what *your* connection is using. The real question for a service like Prisma is what cipher they enforce as a minimum for all their connections. That's usually in a compliance doc or a whitepaper. Have you found that info yet?
✌️