topic Prisma Access Validation Error Quarantine List in Prisma Access Discussions

Prisma Access Validation Error Quarantine List

Sarc845 — Wed, 05 Jan 2022 09:06:53 GMT

Hello Everyone,

Has anyone ever seen this commit error before?

Validation Error:

plugins -> cloud_services -> service-connection -> quarantine-list-redistribution unexpected here
plugins -> cloud_services -> service-connection is invalid

Little confused as there is no quarantine list feature here?

Re: Prisma Access Validation Error Quarantine List

nikoolayy1 — Wed, 12 Jan 2022 11:31:18 GMT

Better check your Service connection as Prisma by default tries to do redistribution of user-id, HIP info and other stuff:

Redistribute User-ID Information Between Prisma Access and On-Premise Firewalls (paloaltonetworks.com)

Configure the Service Infrastructure (paloaltonetworks.com)

Please see:

Identification and Quarantine of Compromised Devices Using Prisma Access (paloaltonetworks.com)

Check if you have enabled the quarantine redistribution and also you need a service object in Prisma a routing and redistribution point between the the mobile gateways and you don't need to connect the service object your on Prem Data Center but just to have it as a redistribution point.

Re: Prisma Access Validation Error Quarantine List

Sarc845 — Wed, 12 Jan 2022 11:45:39 GMT

Thanks for the input, its not setup. So will probably escalate to panw

Re: Prisma Access Validation Error Quarantine List

nikoolayy1 — Wed, 12 Jan 2022 11:51:13 GMT

Ok but have you checked if you have a valid service object in Prisma Access "

plugins -> cloud_services -> service-connection is invalid

Manage Prisma Access Service Connections (paloaltonetworks.com)

Re: Prisma Access Validation Error Quarantine List

Sarc845 — Thu, 13 Jan 2022 07:32:40 GMT

Hi Nikolay,

Yep, checked the service connections. Nothing strange there.

Re: Prisma Access Validation Error Quarantine List

nikoolayy1 — Thu, 13 Jan 2022 08:11:25 GMT

If you have not enabled quarantine distribution and you have a legitimate service connection then yes it seems like a bug issue.

You can still check the link below for known issues for Prisma Access 2.2:

Prisma Access Known Issues (paloaltonetworks.com)