topic Re: Prisma - ClipChamp in General Topics

Prisma - ClipChamp

MarkJCadman — Mon, 20 Jan 2025 10:02:36 GMT

Hi all,

I have an issue where I cannot sign into the ClipChamp application when connected to Global Protect - the web version is fine. Something must be blocking it, but I can't find anything in the logs. I do see some traffic being allowed, but the end session reason is 'policy-deny' - what is this policy!? I'm not entirely sure this is related, but could be as it is a Microsoft IP address. I have just given myself full access outbound and it still doesn't work. Has anybody experienced this? What did you do to get it working? Thanks.

Re: Prisma - ClipChamp

JayGolf — Fri, 24 Jan 2025 03:23:10 GMT

Hi @MarkJCadman ,

Can you share a screenshot of your logs and blur out any IPs? If you gave yourself full internet access and still find that its not working, it could be possible that it is being picked up as a threat. Try removing your security profiles from the policy and test again.

As far as finding relevant logs, I would filter traffic from a test client and see if you can get IP addresses for the application you are trying.

Re: Prisma - ClipChamp

MarkJCadman — Fri, 24 Jan 2025 10:14:24 GMT

Thanks for your reply.

Please see the logs. I have allowed direct access on this policy and removed all security profiles. The two IPs in the logs are MS IPs and match up with the time when trying to log into the ClipChamp app.

Re: Prisma - ClipChamp

BPry — Sun, 26 Jan 2025 04:39:41 GMT

@MarkJCadman,

You might want to try temporarily excluding yourself from decryption and seeing if that corrects the issue that you're seeing with the application. The application could be using cert pinning and depending on how you have your decryption profile setup that would be an expected session_end_reason. This is pretty typical with mobile applications and I believe that Clipchamp is just a mobile port on the Microsoft Store for Windows.

Re: Prisma - ClipChamp

nsalamanes — Thu, 30 Jan 2025 05:41:01 GMT

We have the same issue. @MarkJCadman what was the solution you implemented?

Re: Prisma - ClipChamp

MarkJCadman — Thu, 30 Jan 2025 11:31:38 GMT

How do I do that??

Re: Prisma - ClipChamp

MarkJCadman — Thu, 30 Jan 2025 11:32:21 GMT

I don't have one yet.

Re: Prisma - ClipChamp

BPry — Fri, 31 Jan 2025 01:47:53 GMT

@MarkJCadman,

https://live.paloaltonetworks.com/t5/prisma-access-cloud-management/enabling-decryption-with-prisma-access-cloud-management/ta-p/396764 walks through the custom exclusion process that Prisma Access relies on.