Routing - Last Resort Network

Hello,

I am sure I tested this previously and found it work but today when I am testing the routing seems to fail -  as a background my sites have Internet using Prisma Remote networks and also backend MPLS connectivity

layout example:

I have all my R

can we get user's city/region/state info in Prisma Access

We have a requirement of finding Location of our Work from home users. Currently we are able to extract the Report with country.

So now we want to extract the User’s accurate geo location. There are approx. 5000 VPN users.

I got to know that Prisma ac

Intermittent Internal DNS resolution issue over Global Protect Prisma

The issue is unable to access anything on internal network when connected to VPN due to DNS resolution issue. Unable resolve any internal URL, Hostnames..etc but external URLs resolution is working like google.com, paloaltonetworks.com..etc.

The stran

Prisma Access 2.0 Upgrade

Hi everyone, as you are upgrading to Prisma Access 2.0, you may have some questions along the way. We want to let you know that we are here to help and want to make sure you have all the resources and information you need. This discussion will have e

Panorama Managed Prisma Access and HIP Device Block Lists

I don't see any documentation pertaining to establishing Device Block Lists on Panorama Managed Prisma Access systems. Is this feasible?

Prisma Access and LDAP Group Mapping with Directory Sync Agent

Hello,

I'm trying to implement group-based policies in a standalone Prisma Access deployment. I'm working only with Prisma for Remote Networks. For this purpose I have enabled a Directory Sync Agent to retrieve groups from LDAP Server but Prisma don't

Prisma Cloud log ingestion?

Is there a way to find out what types of AWS logs are being ingested by Prisma Cloud in the console? I want to make sure that all of our AWS resource logs are being ingested by Prisma Cloud.

How do you control restricting access to enterprise versions of your SaaS applications?

When it comes to restricting access to the enterprise vs personal version of a given SaaS application, there are multiple ways in which it is handled: 

• One can make use of the relevant App-ID signatures to only allow enterprise access
• Make use of the H

Caveats for Redistributing User-Id info from Prisma Access to on-prem firewalls

At the time of this writing, the process for redistributing User-ID info from Prisma Access to on-prem firewalls is documented publicly here:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-user-based-pol

Connecting Prisma Access to your Public Cloud

Broadly speaking, there are a few ways to bridge Prisma Access (or a VM/physical firewall for that matter) into your public cloud environment. I will be using AWS as my example by very broadly these ideas still apply.

AWS documents 4 ways to connecti

Allowlisting your Prisma Access Tenant

Hi all,

I've found that this is a frequent question that comes up for new and existing Prisma Access customers. Long story short there are a couple of ways to go about this.

The most advanced and scalable option would be to use a solution like Cortex

Prisma Gateway Cert Expiration

Has anyone else noticed that the Prisma Access gateway certs expired today? A large majority of our users are unable to connect since GP sees the certs aren't valid. Trying to determine if this is isolated to us (which I doubt). 

infrastructure subnet sizing prisma access ?

What are the sizing guidelines for the infrastructure subnet for prisma access?   I've read the below, and I know it's for services to talk to each other on the backend for prisma/use services.   But what are the sizing guidelines, and what does one

Prisma Access & pre-logon

We are trying to make Prisma Access pre-login work and are having no luck. We have had support on-line looking at the config and we just do not see the pre-login user in the logs. Currently we are at a standstill. We are using our own certificates, n