Prisma Access rules : how to calculate when used?

Viewing through Panorama 10.0.6, while looking at my Mobile_Users_Device_Group, I see various rules showing their levels of usage. What is difference (if any?) between rules that show "unused" vs. those that show "-" in their Rule Used state? Togglin

Configuring Prisma Access Remote networks and Service Connections on the same device/site

Hi everyone, 

I wanted to know what would be the challenges to deploy Service Connection and Remote Networks on the same device/site and what would be the best solution or workaround as per PAN best practices

As per my understanding, if we deploy Ser

DNS resolution issue in prisma access for internal domains

We want to access one of the url fs.hdfc.com, which accessible publicly.

But when when we connect to Global Protect via Prisma access for this url, DNS Server is resolving for internal address i.e. private ip address.

While accessing from outside netw

BGP, Community settings for Prisma

Hi all,

i have some questions regarding community settings because we use this in our org to influence routes selection.

Based on this document "https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-prisma-acc

Routing - Last Resort Network

Hello,

I am sure I tested this previously and found it work but today when I am testing the routing seems to fail -  as a background my sites have Internet using Prisma Remote networks and also backend MPLS connectivity

layout example:

I have all my R

can we get user's city/region/state info in Prisma Access

We have a requirement of finding Location of our Work from home users. Currently we are able to extract the Report with country.

So now we want to extract the User’s accurate geo location. There are approx. 5000 VPN users.

I got to know that Prisma ac

Intermittent Internal DNS resolution issue over Global Protect Prisma

The issue is unable to access anything on internal network when connected to VPN due to DNS resolution issue. Unable resolve any internal URL, Hostnames..etc but external URLs resolution is working like google.com, paloaltonetworks.com..etc.

The stran

Prisma Access 2.0 Upgrade

Hi everyone, as you are upgrading to Prisma Access 2.0, you may have some questions along the way. We want to let you know that we are here to help and want to make sure you have all the resources and information you need. This discussion will have e

Panorama Managed Prisma Access and HIP Device Block Lists

I don't see any documentation pertaining to establishing Device Block Lists on Panorama Managed Prisma Access systems. Is this feasible?

Prisma Access and LDAP Group Mapping with Directory Sync Agent

Hello,

I'm trying to implement group-based policies in a standalone Prisma Access deployment. I'm working only with Prisma for Remote Networks. For this purpose I have enabled a Directory Sync Agent to retrieve groups from LDAP Server but Prisma don't

Prisma Cloud log ingestion?

Is there a way to find out what types of AWS logs are being ingested by Prisma Cloud in the console? I want to make sure that all of our AWS resource logs are being ingested by Prisma Cloud.

How do you control restricting access to enterprise versions of your SaaS applications?

When it comes to restricting access to the enterprise vs personal version of a given SaaS application, there are multiple ways in which it is handled: 

• One can make use of the relevant App-ID signatures to only allow enterprise access
• Make use of the H

Caveats for Redistributing User-Id info from Prisma Access to on-prem firewalls

At the time of this writing, the process for redistributing User-ID info from Prisma Access to on-prem firewalls is documented publicly here:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/configure-user-based-pol