Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
About Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.

Discussions

Welcome to the Prisma Access Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 2668 Views
  • 0 replies
  • 1 Likes

Prisma Access Locations IP Addresses

I'm struggling to find the IP Addresses allocated for the 5 Prisma Access Locations we're using. We would like to build a conditional access policy in M365 to only allow traffic from our Global Protect client via the Gateway IP addresses or ranges. I've seen articles saying to use the API which I have zero knowledge of. I just want the IPs so...

jeppich by L1 Bithead
  • 5286 Views
  • 3 replies
  • 0 Likes

Prisma Browser

The cache and cookies have been cleared per the troubleshooting instructions, but the loading problem still persists via the Prisma browser. It is worth noting that other browsers such as Google and edge are able to load up the docs.

Explicit Proxy: Is it only for RA VPN users ? Can I use for a certain Servers which doesnt have URL filter ?

Hi I have this question . We use Prisma Access SASE and SD-WAN: Background: One of our On Prem FW has an expired URL Filter license. We have some Test servers and they are not doing URL Filter any more. Is it possible that we use PAC file to redirect the Web Traffic to Prisma Access ? 1. Is Explicit proxy in Prisma Access/Strata Cloud Mana...

Ariq_Aziz_0-1729132575787.png

Authenticating GP users to Prisma Access with user certificates?

Hi folks, We are currently using an LDAP auth profile to auth our GP clients to PA. This is working fine, but the portal logs are just swamped with brute force attacks day & night and PAN refuses to fix this, so we are wanting to move over to certificate authentication instead. In brief, we have an AD-integrated MS PKI that issues user and...

Resolved! How to check which Remote Network tunnel handling traffic?

In our Prisma Access Remote Network deployment, we have created 2 sites, each sites having two IPSec tunnels configured as Primary and Secondary. I wanted to verify the logs in Log viewer to identify the tunnel which is currently handling the traffic as I can see option to filter based on sites not tunnels Any suggestion would helpful.

Prisma Access Api, stuck with initial requestes.

Hi,In the Prisma access i trying to do api call to get information of my console i have followed offical documentation like was able to generate access token and made a request to get "jobs" details when i try to run these commad curl -o --location "https://api.sase.paloaltonetworks.com/config/v1/jobs" \-H "Authorization: Bearer <MY ACCESS_TO...

balasuriyas_2-1728020029789.jpeg
balasuriyas_3-1728020256473.jpeg
B.Suriya by L2 Linker
  • 2040 Views
  • 2 replies
  • 0 Likes

Resolved! Pre-logon than switch to On-Demand

Hi all, I have configured prisma access GlobalProtect to authenticate pre-logon with computer certificate and than switch to on-demand. pre-logon works as expected and the on-demand authentication with SAML using CIE. I was wondering if there is option to configure pre-logon and always-on so when user connects to the station GlobalProtect ...

Maximt by L0 Member
  • 2292 Views
  • 1 replies
  • 0 Likes

Prisma Access with CIE

Hi All, Need your assistance. The problem is that test rule with user group doesn't have any hits. The users generating traffic are definitely part of the group. Setup: Prisma Access managed from On-prem Panorama. CIE with AD sync. Users and groups are visible from CIE dashboard. When policy rule configured I can choose from the groups list. ...

Prisma Access 3.2, Global Protect Internal Host Detection using Azure SAML MFA.

Hi,I am trying to setup internal host detection for Global Protect within Prisma Access 3.2. Global Protect authentication is using SAML with MFA. Due to the Portal requiring login before internal host detection can take place, how do I stop the MFA prompt being presented with I am joining my device to the corporate network?I have this worki...

Brodie_D by L0 Member
  • 6336 Views
  • 6 replies
  • 0 Likes

GlobalProtect on Mac does not retry after network connection unreachable.

We are deploying Prisma Access on both mac and windows computers. On the Mac computers, when the computer boots and the network is not initialized yet, we get the error: "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." Which is understandable. The issue is when the computer ...

Traffic Steering Logs

Hi Team, We are managing Prisma SASE from Panorama. We have traffic steering in place for few of the URL categories. May i know how can we check the logs and confirm the URL is taking the Traffic Steering policy or not? I dont see any options to check the logs in Monitor Tab.

Prisma Access connectivity to Azure VWAN (Service connection Secondary WAN link)

Hi all, as part of a prisma access deployment, we need to build service connection links between prisma access and Azure (via the azure virtual WAN service). We'd like to activate redundancy in the service connection links, and enable a function called: "WAN secondary SC Link" (passive service connection link) to configure service connections ...

BArcelin by L0 Member
  • 3202 Views
  • 2 replies
  • 0 Likes
  • 389 Posts
  • 79 Subscriptions
Top Solution Authors
Top Liked Authors