https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-quarantine-prisma-access-mobile-users/m-p/574736#M4895 <P>Has anyone used the GlobalProtect quarantine device functionality with Prisma Access Mobile User deployments?&nbsp; I have data redistribution setup with the service connection infrastructure subnet, but devices in the quarantine list do not seem to be recognized on the mobile user gateways.&nbsp; &nbsp;There must be a disconnect with the quarantine list on Panorama not getting to the mobile user gateways.</P> <P>&nbsp;</P> <P><A href="https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/quarantine-devices-using-host-information/block-quarantined-devices-from-accessing-the-network" target="_blank">https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/quarantine-devices-using-host-information/block-quarantined-devices-from-accessing-the-network</A></P> Mon, 29 Jan 2024 14:38:34 GMT JasonRakersKSS 2024-01-29T14:38:34Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-quarantine-prisma-access-mobile-users/m-p/574736#M4895 <P>Has anyone used the GlobalProtect quarantine device functionality with Prisma Access Mobile User deployments?&nbsp; I have data redistribution setup with the service connection infrastructure subnet, but devices in the quarantine list do not seem to be recognized on the mobile user gateways.&nbsp; &nbsp;There must be a disconnect with the quarantine list on Panorama not getting to the mobile user gateways.</P> <P>&nbsp;</P> <P><A href="https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/quarantine-devices-using-host-information/block-quarantined-devices-from-accessing-the-network" target="_blank">https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/host-information/quarantine-devices-using-host-information/block-quarantined-devices-from-accessing-the-network</A></P> Mon, 29 Jan 2024 14:38:34 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-quarantine-prisma-access-mobile-users/m-p/574736#M4895 JasonRakersKSS 2024-01-29T14:38:34Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-quarantine-prisma-access-mobile-users/m-p/576065#M4946 <P>This requires Data Redistribution between the Mobile User gateways and Prisma Access User-ID nodes.&nbsp; So in your Mobile_User_Template, be sure you have an Agent configuration pointing to your provisioned User-ID nodes on the service infrastructure subnet.&nbsp; Remember to enable them for Quarantine List.</P> Mon, 05 Feb 2024 15:55:13 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-quarantine-prisma-access-mobile-users/m-p/576065#M4946 JasonRakersKSS 2024-02-05T15:55:13Z