Prisma Access and LDAP Group Mapping with Directory Sync Agent

Hello,

I'm trying to implement group-based policies in a standalone Prisma Access deployment. I'm working only with Prisma for Remote Networks. For this purpose I have enabled a Directory Sync Agent to retrieve groups from LDAP Server but Prisma don't

Prisma Cloud log ingestion?

Is there a way to find out what types of AWS logs are being ingested by Prisma Cloud in the console? I want to make sure that all of our AWS resource logs are being ingested by Prisma Cloud.

How do you control restricting access to enterprise versions of your SaaS applications?

When it comes to restricting access to the enterprise vs personal version of a given SaaS application, there are multiple ways in which it is handled: 

• One can make use of the relevant App-ID signatures to only allow enterprise access
• Make use of the H

Caveats for Redistributing User-Id info from Prisma Access to on-prem firewalls

At the time of this writing, the process for redistributing User-ID info from Prisma Access to on-prem firewalls is documented publicly here:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-user-based-pol

Connecting Prisma Access to your Public Cloud

Broadly speaking, there are a few ways to bridge Prisma Access (or a VM/physical firewall for that matter) into your public cloud environment. I will be using AWS as my example by very broadly these ideas still apply.

AWS documents 4 ways to connecti

Allowlisting your Prisma Access Tenant

Hi all,

I've found that this is a frequent question that comes up for new and existing Prisma Access customers. Long story short there are a couple of ways to go about this.

The most advanced and scalable option would be to use a solution like Cortex

Prisma Gateway Cert Expiration

Has anyone else noticed that the Prisma Access gateway certs expired today? A large majority of our users are unable to connect since GP sees the certs aren't valid. Trying to determine if this is isolated to us (which I doubt). 

infrastructure subnet sizing prisma access ?

What are the sizing guidelines for the infrastructure subnet for prisma access?   I've read the below, and I know it's for services to talk to each other on the backend for prisma/use services.   But what are the sizing guidelines, and what does one

Prisma Access & pre-logon

We are trying to make Prisma Access pre-login work and are having no luck. We have had support on-line looking at the config and we just do not see the pre-login user in the logs. Currently we are at a standstill. We are using our own certificates, n

New to Prisma access - Cisco to Prisma VPN question

Hi,

Any pointers appreciated on this. We have connectivity to Prisma via IPsec without a Cisco VTI/tunnel interface. I would like to change this so that we use Cisco VTI/tunnel at the remote access site. How do I create a VTI in Prisma access for an I

Group Mapping

Hi,

The Prisma Documentation is not clear. Can I get group mapping working with just defining group mapping on the template or do I need directory sync? If I can get group mapping working without directory sync what is the value of directory sync othe

Prisma Access - Verify Connection through proxy server

Hello,

We are trying to deploy Prisma Acess but are stuck on the step where you need to verify the connection from the Panorama plugin. We get an error on the cortex data lake status. We are able to fetch the logging service certificate. So certifica

Minimum Password Complexity for Prisma Access Local DB users

In the default template available for Mobile users this feature option is not available. But you can configure minimum password complexity options for Local DB users in Prisma access with a workaround. 

You can enable this feature for Local users b

Prisma Access 1.7 Post-Launch !

Palo Alto Networks has been working hard on expanding Prisma Access capabilities. 

About a month ago, Prisma Access Cloud Services plugin 1.7 was released including support for PAN-OS 9.1, new traffic steering functionality, adding a new compute lo