Prisma Access Cloud Management| Palo Alto Networks

Welcome to the Prisma Access Cloud Management Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Policy Optimizer dosn't show any policies

Hey, I have the right licenses for the policy optimizer and policies that are active for more than 15 days yet I don't see anything in the optimizer screen, I only use the SCM to manage prisma access (no NGFW), any ideas?

Prisma Access Strata Cloud Manager - Push Failed

Subject: GlobalProtect Push Configuration Fails with "Unexpected Commit Error" on Strata Cloud Manager Hello, We are currently using Prisma Access with Strata Cloud Manager (SCM), and we're experiencing a critical issue. Whenever we attempt to push the GlobalProtect configuration, the operation fails with the following error message: [status]:...

Resolved! Brand new domain go to sinkhole

Hello. I am currently using Prisma GlobalProtect and am aware of the EOS notice. I recently purchased a new domain (.ai), set it up on AWS, and began development. However, when connecting Prisma GlobalProtect, access to the domain fails. Upon checking with `nslookup`, all responses are as follows: Server: 10.1.133.1 Address: 10.1.133.1#53 No...

Resolved! list active users in Strata Cloud Manager?

On the main dashboard in Strata Cloud Manager, I see a world map with a circled number showing that I have 50 users logged in from my immediate metro area. I can drill down until I just see smaller maps with dots indicating invididual users. That's OK, but it would be awfully useful sometimes to just see a list of authenticated users, and I ca...

Welcome to the Prisma Access Cloud Management Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Need to delete unused RN SPN

Hello Guys, So, we have few unused RN SPNs in our managed Prisma access panorama. I need to delete these unused Rn SPNs. For this I need to first delete the IPsec tunnels associated with each RN SPN, but for that I have to delete Phase 1 and Phase 2 and then IPSec tunnel. But I can't fins options for that. Can someone please guide me on this ?

Replacing the vm-series firewall with prisma access

Hi, I want to replace the VM-Series firewall with Prisma Access, but I need to weigh the pros and cons before moving to this setup. Therefore, I would appreciate your input in providing a solution for this SASE architecture. Here are a few points I have collected: Low latency in Prisma Access: Since we will spin up the nearest gateway...

Resolved! The Policy Optimizer is not listing the rules created in the security policy.

Hi The Policy Optimizer is not listing the rules created in the security policy with application set to any. regards, Akash Thangavel.

Force log out users from the cloud-managed Prisma Access Gateway.

Hi Force log out users from the cloud-managed Prisma Access Gateway. Currently logged-in users will be listed; here, we can force log out users from GP. regards, Akash Thangavel

Resolved! Disable TLS 1.1 and 1.2 for Prisma Access VPN url.

Hi All During our Vulnerability Assessment, the vendor found that our Prisma Access (SASE) VPN URL has TLS 1, 1.1 and 1.2 Enabled. and recommended to disable up to 1.2 and use 1.3 only. I can't find that settings in Cloud Strata Manager. Any idea where is that settings in Strata?

Best Practice "Allow New Apps" rule is blocking an URL

Hi Experts one of our devOps guy use "Postman" and getting connection reset while using the URL" xxx.yy.api.zzzz.io/" (TCP 443) Log shows Traffic is allowed but URL is getting blocked by the Same RULE called "Allow New App" its a default best practice rule and doesnt allow me to change the URL or add a bypass. What is the best way to overcome th...

Prisma Cloud Backup and Restore

Hi everyone. I have a problem. Context: we are deploying Prisma Cloud by code as a container in OpenShift. Problem: when execute a Backup and Restore from GUI or from Cli with twiscli command the console break down, what do I mean?, the console lost connection with OKTA and the key licenses as well and we have to deploy all enviroment again fr...

Prisma Cloud Wildfire Runtime protection on hosts

Hello. I hope you're well. I have a question regarding the Wildfire solution for hosts. First, I enable Wildfire protection for Runtime from MANAGE>SYSTEM. I then create a runtime policy for the host in order to check for malware detection. But my question is whether on the hosts where the Prisma Cloud agent is installed, Wildfire is deploy...

Resolved! Prisma Cloud Runtime Policy

Spoiler (Highlight to read)Hello. I hope you're well.I have a simple but perhaps complex question.Scenario: I have two hosts, A and B, and Prisma Cloud mounted on another server. I create a policy in Defender>Runtime by which I am preventing the nmap process. Once I logged in to host A and ran nmap, I obviously don't have permission due to Pr...

Prisma cloud custom dashboard

Hi All, Create a custom dashboard in prisma cloud but not able to publish or share so that my team can view the dashboard. I checked the documentations but couldn't anything. Can someone please help me on this? Thanks!