This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
About Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.

Discussions

Start a conversation

Welcome to the Prisma Access Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 2754 Views
  • 0 replies
  • 1 Likes

On-Boarding of Cisco SDWAN to Prisma

We are trying to on-board Cisco SDWAN Catalyst to Prisma. Created the necessary IKE/IPSEC configurations, etc, followed Integrate Prisma Access with Cisco Catalyst SD-WAN (Manual Integration) KB When we push to remote networks we receive a validation error [status]: commit failed [errors]: Validation error occurred in:Region: US East Validation ...

Resolved! I'd like to know about certificates for GlobalProtect user authentication.

Attention: JAPAC TPM teamHello Team, Is it possible to apply client certificates to only some user authentications using GlobalProtect depending on the OS type? My understanding is that if a certificate is specified in GlobalProtect's user authentication settings, it will also be set in other user authentication settings, so I don't think th...

y.saitou by • L3 Networker
  • 4190 Views
  • 2 replies
  • 0 Likes

The user information linked in the CIE does not match the match criteria in the GP's application settings.

We would like to know the user information that corresponds to the GP sign-in account and tunnel settings and other matching conditions.We are currently verifying SAML login and SSO in our verification environment.In the GP application and tunnel settings, we have specified the user information obtained from the Entra ID as the matching conditio...

Resolved! Could you please tell me about the Embedded Browser Framework Upgrade, an enhancement of GlobalProtect version 6.3?

Attention: JAPAC TPM teamHello Team, I wanted to reduce the amount of user interaction with GlobalProtect's SAML authentication, so I did some research and found the following feature.https://svc-desc.paloaltonetworks.com/mobile-users/gp/gp-agent/#embedded-browser-framework-upgrade◇Embedded Browser Framework UpgradeAs part of pre-implementatio...

y.saitou by • L3 Networker
  • 4767 Views
  • 2 replies
  • 0 Likes

Resolved! Please tell me about Client to Firewall and Firewall to Client in the Strata Cloud Manager Firewall/Decryption log.

Attention: JAPAC TPM teamHello Team, Please tell me about Client to Firewall and Firewall to Client in the StrataCloudManager Firewall/Decryption log. My understanding of Client to Firewall and Firewall to Client is as follows.-Client to Firewall: TLS handshake information sent by the client (Client Hello, etc.)-Firewall to Client: TLS informa...

y.saitou by • L3 Networker
  • 2089 Views
  • 1 replies
  • 0 Likes

Could you please explain the security policy's "Internet Access Rule"?

Attention: JAPAC TPM teamHello Team, Could you please explain the security policy's "Internet Access Rule"? I have a question about the "File Control Profile" item under "Security Inspection" at the bottom of the settings screen. ▼Predefined- All file types- Best practices- Block file types What does each of these do? Also, there is a "Custo...

y.saitou by • L3 Networker
  • 1700 Views
  • 2 replies
  • 0 Likes

Resolved! Regarding the selection of the MU-SPN connection destination

Attention: JAPAC TPM teamHello Team, When IP Optimization is disabled and there are multiple MU-SPNs in a single compute location,how is the MU-SPN to be connected to selected? I understand that it connects to the one that is physically close and has the fastest response,but is load balancing performed? If load balancing is performed, what m...

y.saitou by • L3 Networker
  • 2039 Views
  • 2 replies
  • 0 Likes

Resolved! Please tell me about the DNS server address that is dynamically set when connecting to Global Protect.

Attention: JAPAC TPM teamHello Team, If you run ipconfig /all after connecting to GlobalProtect, the DNS server entry will show an IP address in the same segment as the device's IP address. -I understand that this DNS server is the IP address used as a proxy, but is that correct?Also, is it correct to understand that this DNS server's IP addre...

y.saitou by • L3 Networker
  • 2215 Views
  • 2 replies
  • 0 Likes

GP agent as user to ip mapping method for Prisma remote network

Is it possible to use GP as user to ip mapping method for Prisma remote network? I cannot see GP portal/gateway configuration buttons (they are looks not active -greyed out) on Remote Network template (Prisma Access managed by Panorama) this settings is available for Mobile User template. Plan was to integrate internal GP gateway add to the Mobi...

bxbukows by • L1 Bithead
  • 5530 Views
  • 11 replies
  • 0 Likes

Service Connection Redundancy

Hi Team, I know that we can Redudanant the Service Connection witht 2 ISP with 2 Tunnels but i want some information we know we have 2 tunnel so if our one tunnel is down another will up but but what about Service Connection itself e.g i have Service Connection Tunnel so if the service Connection is down by itself? so how they have redudu...

MAlam19 by • L1 Bithead
  • 1329 Views
  • 2 replies
  • 0 Likes

BGP

i am activated BGP in service connection, but why in BGP status is Not Enabled, while in Monitor > Data Center BGP Status is UP.?

  • 395 Posts
  • 80 Subscriptions
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks