Prisma Access Discussions

Prisma Access - CIE multi profile - breaks SSO

Hello all . 

Seem to be casting into an empty pool here but will try anyway. 

My issue is with Multi Auth profiles using Global Protect & Prisma Access. 

If you use more than one IDP you can only match against one profile , hence you can't use mu

PRISMA ACCESS BROWSER EXTENSION (PABX)

When i deploy pabx from MDM to Endpoint users, Extension automatically installed in browser (chorme or edge ), after installed users must be login and the extension works.

in my Questions, Can the login be done automatically too? So when the pabx e

Policy update frequency for Prisma Access Browser

I'm looking for how long does it take to take affect to the PAB users if I change configuration for PAB on SCM.

In another words, how often does PAB refresh policy to the latest.

Even I could not find any document/KB, I found that timestamp increas

Regarding the DLP function of Prisma Access Browser

This Question is Regarding the DLP function of Prisma Access Browser.

I think it is possible to apply data control when the rules created in Prisma Access Browser's Policy > Rules > [Access & Data Control rule] match Data Profiles or Data Patterns.

In an environment where IP Optimization is enabled, what are the conditions under which the Egress IP increases or decreases?

Hello Team,

IP Optimization for Mobile Users—GlobalProtect Deployments
https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-setup/retrieve-ip-addre...

IP Optimization for Mobile Users
https://svc-desc.paloaltonetworks.com/mo

About Activity Insights Office Users and Other Hosts counts

The following document explains Insights > Activity Insights > Users > Office Users and Other Users in Strata Cloud Manager.
Please allow me to confirm a few things that were unclear about this section.

[Activity Insights: Users]
https://docs.paloalt

Prisma Service Connection to Azure

Has anyone had success with the one of the default Phase1 and Phase2 configurations for VPN connectivity to Azure.

Did you have to configure a custom set of VPNs.

Any visibility to this configuration will be helpful

IPSEC Tunnel Secondary is always down

We configured service connection with 2 tunnels in strata cloud manager, primary and secondary. The primary tunnel is up but the secondary tunnel is still down. For config proposals, phase1 and 2 are appropriate and match.

Is the behavior when the pr

API method to pull no. of connected mobile users

What is the method to pull # of connected users from Prisma Access - Panorama Managed. Thanks,

Planning to migrate the Prisma Access configuration from Panorama to SCM.

Hi team,

Planning to migrate the Prisma Access configuration from the Panorama Cloud Service Plugin to SCM. Is there any migration tool available for this, or how should we approach this migration for a customer moving to SCM?

regards,

Akash Than

Cloud Identity Engine - Multi Auth Profile

Hello All . 

Have a very simple thing I am trying to do but as ever things are not so simple with Palo . 

I'm using Prisma SASE  and this focus around this question is Cloud ID Engine & Global Protect. 

WE are AAD only with no on premise resources

Access connect Global Protect

dear

How do I check how many times a user has logged into global protect during 90 days?

GP Client - Available Gateway selection process

Numerous reports of users connecting to GPCS Gateways in different regions E.g. EMEA connecting to Japan, NA to APAC etc. Client recently upgraded to v6.2.5. Uptick in these cases reported.

User from hibernation signs into GPCS @ 09:52, user based

Prisma Access Browser (PAB)

Hi guys

if we use a private connection (hotspot) and want to access internal applications using PAB is it possible? user conditions do not use vpn (GlobalProtect)