topic Re: PAC File for Prisma Access China in Prisma Access Discussions

PAC File for Prisma Access China

IBalaro — Thu, 07 May 2026 01:39:21 GMT

Hi,

Currently deploying Prisma Access China. No service connection license, hence, PANW on-prem FW is added as External Gateway. I have enabled and configured PAC file. I'm expecting that internet traffic will pass through Prisma Access but upon checking, it passes through on-prem firewall (checked by using ipchicken.com). I have attached the configured forwarding rules. Thanks in advance!

Re: PAC File for Prisma Access China

IBalaro — Thu, 07 May 2026 01:54:23 GMT

to add, I have removed the default gpcloudservice.com in GP app setting under external gateway and added the on-prem GP gateway.

Re: PAC File for Prisma Access China

nikoolayy1 — Sun, 10 May 2026 11:23:15 GMT

Check your internal host detection and maybe see GlobalProtect Internal Host Detection with Always-On and Enforcement as Pre-logon or User-logon are needed for internal host detection.

The globalprotect network logs GlobalProtect will give you more info if needed,