Prisma Access Discussions

Resolved! Prisma Access - additional agent config for gateway settings

Hi,

Does anyone know if there is a possibility for another agent config for gateway settings within the Mobile_User_Template ?
It seems that whatever I put in there it's been ignored and always the DEFAULT config is given to the clients.

On on-premise d

Resolved! Send ClearPass XML-API IP-User mappings to PRSIMA firewalls

Hi there,

We have Aruba ClearPass configured to send User-IP mappings via XML-API directly to all the Palo Alto MGMT IPs we have on premises.

Now, with PRISMA firewalls being added into our infra I'm wondering how to make Prisma firewalls fitting int

Resolved! How to verify group-mapping in PRISMA access

Hi all,

I'm wondering, how to verify, that the group-mapping in Prisma-Access is working correctly.

We configured the Prisma as described in the admin guides, but my group-based security policies are not working as expected.

Authentication via LDAP is

Resolved! push scope > Prisma access > remote networks using api (Panorama-managed)

Hi,

I am writing a script in python using pan-python module to automate Prisma Access onboarding. I can create all kinds configurations and commit changes to Panorama, but I can't seem to find "push to devices" for Prisma access in the API, which is t

Resolved! Policy Rules between Prisma "zones"

Hi guys,

Is there a requirement to allow traffic between either Remote network(s), or between Remote network toward Mobile, or between Mobile toward Remote Network .. and so on... etc. 

Per example, from Mobile (which supposed to be "trusted"), I'm t

Resolved! Prisma Access Users Global Protect

Hello!

Is there a way to use another port for the GlobalProtect portal for Prisma Access? I know there is a workaround to use another port instead of 443 but you need to creat a loopback interface... but in this service there is not a way to create a

Resolved! Feature Request - Prisma Access secondary tunnel AWS

Hi,

Can I request that the devs urgently build the capability to use secondary tunnels to AWS when using dynamic routing (BGP).

This is listed as a known issue but I'm not sure if it is on the roadmap for a future release:

https://docs.paloaltonetwork