Prisma - ClipChamp

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Prisma - ClipChamp

L1 Bithead

Hi all,

I have an issue where I cannot sign into the ClipChamp application when connected to Global Protect - the web version is fine. Something must be blocking it, but I can't find anything in the logs. I do see some traffic being allowed, but the end session reason is 'policy-deny' - what is this policy!? I'm not entirely sure this is related, but could be as it is a Microsoft IP address. I have just given myself full access outbound and it still doesn't work. Has anybody experienced this? What did you do to get it working? Thanks.

7 REPLIES 7

Community Team Member

Hi @MarkJCadman ,

 

Can you share a screenshot of your logs and blur out any IPs? If you gave yourself full internet access and still find that its not working, it could be possible that it is being picked up as a threat. Try removing your security profiles from the policy and test again. 

 

As far as finding relevant logs, I would filter traffic from a test client and see if you can get IP addresses for the application you are trying. 

LIVEcommunity team member
Stay Secure,
Jay
Don't forget to Like items if a post is helpful to you!

Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L1 Bithead

Thanks for your reply.

Please see the logs. I have allowed direct access on this policy and removed all security profiles. The two IPs in the logs are MS IPs and match up with the time when trying to log into the ClipChamp app.

Cyber Elite
Cyber Elite

@MarkJCadman,

You might want to try temporarily excluding yourself from decryption and seeing if that corrects the issue that you're seeing with the application. The application could be using cert pinning and depending on how you have your decryption profile setup that would be an expected session_end_reason. This is pretty typical with mobile applications and I believe that Clipchamp is just a mobile port on the Microsoft Store for Windows.

L0 Member

We have the same issue. @MarkJCadman what was the solution you implemented?

How do I do that??

I don't have one yet.

Cyber Elite
Cyber Elite

@MarkJCadman,

https://live.paloaltonetworks.com/t5/prisma-access-cloud-management/enabling-decryption-with-prisma-... walks through the custom exclusion process that Prisma Access relies on.

  • 728 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!