Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.
About Prisma Access Discussions
Prisma Access secures access to the cloud for branch offices and mobile users anywhere in the world with a scalable, cloud-native architecture that will soon be managed via a new streamlined cloud management UI.

Discussions

Welcome to the Prisma Access Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 2668 Views
  • 0 replies
  • 1 Likes

Accepting Egress Allocated IP Whitelists on Strata Cloud Manager

Accepting Egress Allocated IP Whitelists on your Prisma Access Mobile-User infrastructure. When upgrades happen on the backend of your Prisma Access Infrastructure there is an automation flag that requires the customer to "accept" the egress IP whitelists for the configured regions that are used for thier SaaS applications. To make sure the...

nayubi_8-1721084068832.png
nayubi_3-1721081001113.png
nayubi_4-1721081016401.png
nayubi_5-1721082722280.png
nayubi by L1 Bithead
  • 3643 Views
  • 1 replies
  • 4 Likes

Having to reboot Mac to access VPN

We are seeing a rash of Macs users that have to reboot their machines to get Global Protect to function after it just stops working. in the logs I am seeing lots of repeating messages such as this 65): getaddrinfo of [inet_ntoa error] failed with error 8, nodename nor servname provided, or not knownP1918-T15883 08/09/2021 17:50:08:105 Dump ( 97...

Ian_bell by L0 Member
  • 4945 Views
  • 4 replies
  • 0 Likes

Resolved! Strata Cloud Manager Scheduled Report

Hello all, I started a scheduled daily PrismaAccessUsage report in Strata Cloud manager (Prisma Access) a couple years ago. I created a new one but how do I delete/stop the old report that is now going to a Decomm'd email address? Thanks

jsnowden by L1 Bithead
  • 3186 Views
  • 3 replies
  • 0 Likes

Regional Blocking Prisma Access Gateways

Is anyone aware of a way to block access to Prisma Access portal/gateways? We are moving to Prisma Access for VPN access from on-prem. We block all regions to our on prem GP portal VPN via a security policy and allow access to a region as someone travels. Is there a similar option for Prisma access?

whinkle by L0 Member
  • 1811 Views
  • 1 replies
  • 0 Likes

agent-user-override-key bad encryption or wrong masterkey after updating Panorama Master Key

Mainly creating this to share the resolution as there doesn't seem to be anything publicly available on this topic. After updating the master key on all of our devices using the below guide I was no longer able to push changes from Panorama to the Prisma Access Mobile Users - GlobalProtect group. Luckily I was able to take a glance at the conf...

Google Calendar ANd Global Protect Prisma access

We do not run Prisma access Global Protect at our headquarters since we wish employees to access on net resources. When Users are remote and Prisma access Global Protect is operational our users are forced to use Global protect or else they are blocked from Google resources such as gmail calendar and Google Apps. All seem to work fine except...

Unable to get Internet After installing Global protect Prisma Access

Hi Team, I raised and eval trail license for practice Prisma access i go through with the tech docs i configure subnet infra and also i configure the global protect installed it on my machine 6.2.x connected successfully with local user. Now i tried to get internet access it showcased this site cant be reach i created security policy as well. ...

Internal Host Detection

dear, I configured Internal Host Detection with an internal IP and DNS, but it keeps trying to connect. What configuration is needed for the pop up to appear, identify that it is on the internal network and do not try again.

Really slow load times for webpages using fonts.googleapis.com on my remote networks

Hi all Im having issues on all my remote networks when loading some websites. Most of them if I open Chrome's developer tools I see the following error GET https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i net:: ERR_CONNECTION_TIMED_OUT Issue is the same using Edge If I set up a business policy on m...

EGarza by L0 Member
  • 3815 Views
  • 1 replies
  • 0 Likes

Resolved! issues with app id updates resulting in commit failures due to exclude 'google-drive-web' is not a valid reference

Hi Looks like the latest update breaks the application filter rule. I had a look and it seem like the "google-drive-web' is a group and does not have an associated risk, 'google-drive-web-base' does have a risk 5 for it, I tried to create one called 'google-drive-web' but I unable to create one as the group is already named 'google-drive-web' ...

John_Thom by L1 Bithead
  • 13072 Views
  • 11 replies
  • 2 Likes

Resolved! Log Type “ZTNA Agent” and “ZTNA Agent Manager” Specifications

Hi all, I am looking for documentation regarding the specifications for the Log Type “ZTNA Agent” and “ZTNA Agent Manager” for the Strata Logging Service. I have searched the documentation but could not find it. Here is a page that might be close: https://docs.paloaltonetworks.com/strata-logging-service/log-reference/endpoint-logs Does anyone ...

Block OpenAI within iTerm2, but allow through browser

Hello, I know it's silly, but we are looking to do just what the subject of this topic says. With the release of iTerm2 version 3.5.0 there are ai integrations to OpenAI. We want to block this traffic if it's from the "UserAgent: iTerm2/3.5.0", but allow this traffic if it's web based. I know that sounds silly, but that's the request in my compa...

  • 389 Posts
  • 79 Subscriptions
Top Solution Authors
Top Liked Authors