Zones in Remote Networks

jo.schoensa — Thu, 11 Aug 2022 13:28:30 GMT

Hi,

we are onboarding the first remote network sites and we tried to map the preexisting zones from our shared internet-policies to the trust and untrust zones.

But inside the traffic logs, we can see, that traffic from the remote networks are coming from a zone, with the name of the remote network.

I would have guest, that these are all in the "trust" zone.

Now the big question is, how to fix that, so we can use our preexisting global internet access policies?

Best Regards

Johannes

Re: Zones in Remote Networks

nikoolayy1 — Mon, 15 Aug 2022 11:40:46 GMT

Better check your zone mapping to be certain. Also the link below has something that could be helpfull.

-----

When creating zones, do not use any of the following names for the zones, because these are names used for internal zones:

trust
untrust
inter-fw
Any name you use for the remote networks (remote network names are used as the source zone in Cortex Data Lake logs)
Prisma Access logs that display a zone of inter-fw are logs used for communication within the Prisma Access infrastructure.

--------

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/zone-mapping

topic Zones in Remote Networks in Prisma Access Discussions

Zones in Remote Networks

Re: Zones in Remote Networks