Authenticating GP users to Prisma Access with user certificates?

Hi folks,

We are currently using an LDAP auth profile to auth our GP clients to PA. This is working fine, but the portal logs are just swamped with brute force attacks day & night and PAN refuses to fix this, so we are wanting to move over to certifi

Prisma Access Api, stuck with initial requestes.

Hi,
In the Prisma access i trying to do api call to get information of my console i have followed offical documentation like was able to generate access token and made a request to get "jobs" details

when i try to run these commad

curl -o --location "

Prisma Access with CIE

Hi All,

Need your assistance. The problem is that test rule with user group doesn't have any hits. The users generating traffic are definitely part of the group.

Setup:

Prisma Access managed from On-prem Panorama.

CIE with AD sync. Users and groups

Prisma Access 3.2, Global Protect Internal Host Detection using Azure SAML MFA.

Hi,

I am trying to setup internal host detection for Global Protect within Prisma Access 3.2.

Global Protect authentication is using SAML with MFA.

Due to the Portal requiring login before internal host detection can take place, how do I stop the

PRISMA Access Intrazone Default - As a firewall engineer this rule gives me the creeps

Quick on for all you PRISMA SASE heads out there. 

Finally getting stability on macOS (god bless GP version 6.2.3) . 

Now it's time to harden up a little bit - easy to do with a firewall I manage but not sure of the ramification on PRISMA. 

So,, Intr

GlobalProtect on Mac does not retry after network connection unreachable.

We are deploying Prisma Access on both mac and windows computers.

On the Mac computers, when the computer boots and the network is not initialized yet, we get the error:

"The network connection is unreachable or the portal is unresponsive. Check

Any Global Protect / Prisma issues in New Zealand this morning

Customer experienced outage across all sites in New Zealand this morning - anyone else had anything similar

Prisma Access - CIE multi profile - breaks SSO

Hello all . 

Seem to be casting into an empty pool here but will try anyway. 

My issue is with Multi Auth profiles using Global Protect & Prisma Access. 

If you use more than one IDP you can only match against one profile , hence you can't use mu

Traffic Steering Logs

Hi Team,

We are managing Prisma SASE from Panorama. We have traffic steering in place for few of the URL categories. May i know how can we check the logs and confirm the URL is taking the Traffic Steering policy or not? I dont see any options to chec

Prisma Access connectivity to Azure VWAN (Service connection Secondary WAN link)

Hi all,

as part of a prisma access deployment, we need to build service connection links between prisma access and Azure (via the azure virtual WAN service). We'd like to activate redundancy in the service connection links, and enable a function ca

Accepting Egress Allocated IP Whitelists on Strata Cloud Manager

Accepting Egress Allocated IP Whitelists on your Prisma Access Mobile-User infrastructure.

When upgrades happen on the backend of your Prisma Access Infrastructure there is an automation flag that requires the customer to "accept" the egress IP whi