Difference Between Two Internal Host Detection for Mobile Users

[Sai_Tumuluri]

Question

On Panorama, when configuring Prisma Access, "Internal Host Detection" is seen at two locations

• Panorama > cloud service plugin > mobile users > configuration > onboarding > general tab > internal host detection.
  Configure Prisma Access for Users
  
  
• Network > GlobalProtect > portals > agent tab > configs > internal > internal host detection
  GlobalProtect Portals Agent Internal Tab
  

Answer

We only use the first option for onboarding. Once on board, use the second option for all further changes. This is to support a variety of customer installations. The value provided during onboarding is reflected under "DEFAULT" Agent config. This is to support simple configuration with one agent config.

The Panorama interface also supports adding multiple agent configs based on user groups or device types. The above second option provides the ability to add "Internal Host Detection" configuration for each agent config. Refer to "Step 2" of the following URL for this config: Configure Prisma Access for Users.