Prisma Access compatibility

BenKnorr2 — Fri, 10 Sep 2021 14:35:26 GMT

I am trying to do some rule enhancement on stuff that is in Prisma. I know that Prisma can export filtered syslogs and Expedition can consume those logs, but the last mile isn't as clear. I want to plug in these logs for machine learning purposes- but I can only do so if I can first import Prisma device groups/rules into an Expedition Project, which isn't as clear if that is possible.

Anybody know if one can see any Prisma config, especially rules, in Expedition if pulling the config via Panorama? A better question might be, can machine learning in Expedition leverage these syslog imported traffic logs and prisma config?

Re: Prisma Access compatibility

lychiang — Fri, 10 Sep 2021 18:11:49 GMT

@BenKnorr2 The answer is no, current version of Expedition is not compatible with Prisma.

topic Re: Prisma Access compatibility in Expedition Discussions

Prisma Access compatibility

Re: Prisma Access compatibility