Prisma Access enable the option "IKE Passive Mode" for extra security as only outbound IPSEC need to be allowed from the private data center

nikoolayy1 — Thu, 16 Jun 2022 09:38:33 GMT

The option "IKE Passive Mode" makes the Prisma Access cloud to be only a VPN responder to the IPSEC traffic, iniated by the on-prem router/firewall or the ZTNA connector and this allows only outbound connections to be permitted. This is similar to some other ZTNA solutions that emphasize that only outbound connections are allowed. The VPN solutions in a long time had options for VPN initiator and VPN responder , also with the new ZTNA connectors it is similar to Zscaler ZPA for example.

Set Up a Primary IPSec Tunnel for Your Service Connection (paloaltonetworks.com)

topic Prisma Access enable the option "IKE Passive Mode" for extra security as only outbound IPSEC need to be allowed from the private data center in Prisma Access Discussions

Prisma Access enable the option "IKE Passive Mode" for extra security as only outbound IPSEC need to be allowed from the private data center