Prisma Access enable the option "IKE Passive Mode" for extra security as only outbound IPSEC need to be allowed from the private data center

The option "IKE Passive Mode" makes the Prisma Access cloud to be only a VPN responder to the IPSEC traffic, iniated by the on-prem router/firewall or the ZTNA connector and this allows only outbound connections to be permitted. This is similar to so

Pre-logon issues for users - windows widgets

Hello,

I have been having an issue over 2022 in that some users when logging on remotely via Prisma cant connect.  I have tracked it down and it seems to be a fairly new windows widget in windows10 where a weather and location widget loads.

To get ar

User ID doesn´t work with 2 domains

Hi, 

Prisma access is cloud-managed and I have integrated Azure AD and On-Premise directories in cloud identity engine. 

One domain for Azure  -> example.com

One domain for on-premise directories that contains the previous --> example1.example.com

The N

Pan-OS Version Query

I have a 9.0.1 PA-220. Is there anyway of updating it so I could access Prisma Access?

Prisma Access User-ID mappings verification

Hi,

We have configured prisma access to retrieve user-id info from a firewall on premise in the Remote Network device template.

Is there a way to verify the user-ip mappings on prisma access?
Like you have on on-prem firewall?

show user ip-user-mapping

Prisma Access Use Cases

Im really new to Prisma Access as I am still learning. From what I gathered so far though, the use cases seem to be very niche if Im understanding correctly.  Much of Prisma Access advantages seems to be in gaining standard PA features/security while

Prisma Access Portal config Azure SAML: test config

Hi,

I have the following question about Prisma Access Portal authentication,  I would like to gradually move my users to use SAML authentication instead of the currently configured profile.

Can I accomplish this by using a group in the Allow List of t

Unable to remove config from Cloud Services

Hello everyone,

I have 'inherited' a Panorama that had a Prisma Trial license, I believe. At the moment, it is not my intention to use Prisma. However, my commits are mostly stuck because of Cloud Service PlugIns installed which I cannot uninstall.

In

DC Interconnect

I want to know more about interconnecting between DCs of Palo Alto.

Not Able To Access Microsoft Store

I am new to Prisma and GlobalProtect. During the initial configuration, I found that our GlobalProtect users were not able to access to Microsoft Store while connected. In order to remedy this, I had to setup Split Tunnel Exclusions as defined in htt