topic Re: deploy updated VPN configuration to internal hosts in Prisma Access Discussions

deploy updated VPN configuration to internal hosts

hilltopia — Fri, 26 Nov 2021 06:44:16 GMT

We're in the process of removing our old web filter and moving to Prisma, enabling pre-logon, and always-on VPN functionality. One concern we have is getting a new GP configuration pushed to machines without having them have to connect to the Portal off network. What is the best process for getting an updated GP configuration to all of our machines?

We do have internal host detection working, as of this morning.

Thanks

Re: deploy updated VPN configuration to internal hosts

nikoolayy1 — Thu, 13 Jan 2022 08:50:38 GMT

You may ask the users to refresh their connection:

How to enable/disable Rediscover Network (i.e. Refresh Connecti... - Knowledge Base - Palo Alto Networks

With prelogon I think that the agent during bootup connects to the portal to see which geteway should be used for prelogon.