Getting "Connectivity to Prisma Access is temporarily unavailable" when generating API Key

Retired Member — Thu, 26 Mar 2020 18:47:53 GMT

I'm trying to generate an API key using this guide: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-ov...

But when I hit "Generate API Key". I keep getting this message:

"Connectivity to Prisma Access is temporarily unavailable"

Anyone else get this?

Re: Getting "Connectivity to Prisma Access is temporarily unavailable&

BenWidmer — Thu, 04 Jun 2020 14:00:59 GMT

It could be a temporary issue, but if it persists you may want to confirm that the traffic isn't getting blocked between Panorama and Prisma Access. You will want to whitelist the following URLs and Ports:

api.gpcloudservice.com (for Prisma Access)
api.paloaltonetworks.com (for Prisma Access)
apitrusted.paloaltonetworks.com (for Prisma Access)
Ports 443 and 444 outbound

If you have a Palo Alto Networks firewall between Panorama and the Internet you could use the paloalto-logging-service and paloalto-shared-services App-IDs to allow this traffic.

References:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/get-started-with-prisma-access-overview.html

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/enable-the-service-infrastructure.html (Note at the bottom regarding App-IDs or ports)

topic Re: Getting "Connectivity to Prisma Access is temporarily unavailable& in Prisma Access Discussions

Getting "Connectivity to Prisma Access is temporarily unavailable" when generating API Key

Re: Getting "Connectivity to Prisma Access is temporarily unavailable&