Zones in Remote Networks

Hi,

we are onboarding the first remote network sites and we tried to map the preexisting zones from our shared internet-policies to the trust and untrust zones.

But inside the traffic logs, we can see, that traffic from the remote networks are comi

how to check Prisma learned routes from on-prem remote networks

We are having all the sites connected to Prisma. We have created site to site tunnels (Route based tunnels from on-prem). We would like to have consolidated route list from Prisma that how many routes being advertised to prisma. 

How do i get that

Mobile User IP Pool functionality

We have an existing deployed Prisma Access solution with MUs using a worldwide pool as deployed during the POC, although all MUs are located in Europe.

We wish to change the MU pool without impacting existing users, although limited to europe users

Feature request - Check Prisma Access backbone routing table

Hello,

Can I request the devs to build some feature to check the infrastructure (Prisma Access backbone) routing table? Something similar to Looking Glass but for the Prisma Access backbone.

Currently it is possible to check the BGP information f

Prisma Access IPSEC tunnel timeout IKE phase-1/phase-2 negotiation is failed as responder....Due to timeout

Hello to All,

I see a lot of failed IKE phase-1 negotiations or even IKE phase-2 negotiations Due to timeout even when I am looking the Panorama logs as the Prisma Access is the Responder. What I see in common is that many Remote Networks are usi

Move our GlobalConnect VPN portal connection to Prisma Access Cloud Portal.

Hi Team, 

Customer wants to move the GP portal from on-prem(PA5220s) to Prisma Access.
Please help me with the required steps/config checks for smooth migration.

Thanks!!

Prisma Access GlobalProtect 

Prisma Access enable the option "IKE Passive Mode" for extra security as only outbound IPSEC need to be allowed from the private data center

The option "IKE Passive Mode" makes the Prisma Access cloud to be only a VPN responder to the IPSEC traffic, iniated by the on-prem router/firewall or the ZTNA connector and this allows only outbound connections to be permitted. This is similar to so

Pre-logon issues for users - windows widgets

Hello,

I have been having an issue over 2022 in that some users when logging on remotely via Prisma cant connect.  I have tracked it down and it seems to be a fairly new windows widget in windows10 where a weather and location widget loads.

To get ar

User ID doesn´t work with 2 domains

Hi, 

Prisma access is cloud-managed and I have integrated Azure AD and On-Premise directories in cloud identity engine. 

One domain for Azure  -> example.com

One domain for on-premise directories that contains the previous --> example1.example.com

The N

Pan-OS Version Query

I have a 9.0.1 PA-220. Is there anyway of updating it so I could access Prisma Access?