topic Re: How to check the configurations defined within the default templates or profiles ? in Prisma Access Discussions

How to check the configurations defined within the default templates or profiles ?

devd_25 — Wed, 06 Nov 2019 03:17:57 GMT

I dont have access to our Prisma Access yet. Hence, as the title suggests, I am looking for configurations defined within the default templates or profiles ?

Service_Conn_Template
default parent group
default authentication profile
default IPSec Crypto Profile

Can someone please direct me to the right documentation ?

Re: How to check the configurations defined within the default templates or profiles ?

Sai_Tumuluri — Wed, 06 Nov 2019 13:08:53 GMT

@devd_25

The default templates have no config on authentication but include IPsec config in service connection and remote network template

Following is the order of templates

Service_Conn_Template_Stack
- Service_Conn_Template
Remote_Network_Template_Stack
- Remote_Network_Template
Mobile_User_Template_Stack
- Mobile_User_Template

Device groups

Parent device group - Needs to be configured by admin during onboarding. of each service.
Device groups for config
- Service_Conn_Device_Group
- Remote_Network_Device_Group
- Mobile_User_Device_Group

How to check the config

1. You can view the config from GUI using Panorama as similar to regular templates and device groups and look into Cloud plugin config

2. You can set cli config output format to set and match to the template of device group of interest

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHoCAK

Prisma Access Admin guide: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin.html

Re: How to check the configurations defined within the default templates or profiles ?

Sai_Tumuluri — Wed, 06 Nov 2019 13:42:06 GMT

@devd_25

Parent Device Group - This needs to be manually set by admin during the onboarding of the services.

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/license-prisma-access/activate-and-install-prisma-access.html

default authentication profile - there is none. However, there are pre-defined IPsec configs. There are no default configs under the pre-defined template and device groups

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-for-networks/quick-configs-for-network-deployments/use-predefined-ipsec-templates-to-onboard-service-and-network-connections

how to check config - you can navigate via regular template and device groups via GUI. Or you can set the CLI output to set and check the config from CLI by matching to pre-defined templates and device-groups

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHoCAK

Predefined templates and device groups

Service_Conn_Device_Group
Remote_Network_Device_Group
Mobile_User_Device_Group

Service_Conn_Template_Stack
- Service_Conn_Template
Remote_Network_Template_Stack
- Remote_Network_Template
Mobile_User_Template_Stack
- Mobile_User_Template

Re: How to check the configurations defined within the default templates or profiles ?

Sai_Tumuluri — Wed, 06 Nov 2019 20:45:31 GMT

Parent Device Group - This needs to be manually set by admin during the onboarding of the services.

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/license-prisma-access/activate-and-install-prisma-access.html

default authentication profile - there is none. However, there are pre-defined IPsec configs. There are no default configs under the pre-defined template and device groups

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHoCAK

Predefined templates and device groups

Service_Conn_Device_Group
Remote_Network_Device_Group
Mobile_User_Device_Group

Service_Conn_Template_Stack
- Service_Conn_Template
Remote_Network_Template_Stack
- Remote_Network_Template
Mobile_User_Template_Stack
- Mobile_User_Template

Re: How to check the configurations defined within the default templates or profiles ?

Sai_Tumuluri — Tue, 12 Nov 2019 13:48:46 GMT

@devd_25 Please mark it solved if you are satisfied with the solution. This closes the discussion and helps others to fastly identify the solutions

~ Sai Srivastava Tumuluri ~