Prisma Access - Global Protect: No Source NAT

MichealSwart — Fri, 17 Jun 2022 08:06:45 GMT

Hi All,

I am new to Prisma Access.

We have done the setup as per PAN.

My question is as follow:

How do you disable source NAT for traffic in Prisma Access for Global Protect, that is going to your internal DC`s?

Kind Regards,

Micheal Swart

Re: Prisma Access - Global Protect: No Source NAT

nikoolayy1 — Sat, 18 Jun 2022 07:09:50 GMT

Are you talking abound Inbound Access that allows access over the Internet to internal applications where you access the internal DC application using a Prisma Access Public IP address? If so then see:

-----------

You must

Enable source NAT

in the

Inbound Access

tab if you select this check box. Source NAT is a requirement to allow inbound flows to other remote networks.

--------

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-advanced-deployments/prisma-access-remote-network-advanced-deployments/provide-secure-inbound-access-to-remote-network-locations/configure-secure-inbound-access-for-remote-network-sites/configure-secure-inbound-access-for-remote-network-sites-for-locations-that-allocate-bandwidth-by-location

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/secure-remote-networks-with-prisma-access/secure-inbound-access

Edit:

Also in many cases X-Forwarded-For (XFF) HTTP header insertion will help as the servers will be able to see the real client ip or for cloud applications that may use this when going to the Internet but for some reason when I talked with Palo Alto they don't think this feature is needed at all but I think it is as when going to a web site in Internet not in a Remote Network or Service location many proxy have this option as then the client ip address is always changed to the one the on-prem or cloud proxy has 🙂

Re: Prisma Access - Global Protect: No Source NAT

nikoolayy1 — Thu, 13 Oct 2022 21:21:34 GMT

If you managed to get the needed answers, please flag the question as answered.

topic Re: Prisma Access - Global Protect: No Source NAT in Prisma Access Discussions

Prisma Access - Global Protect: No Source NAT

Re: Prisma Access - Global Protect: No Source NAT

Re: Prisma Access - Global Protect: No Source NAT