Getting "Connectivity to Prisma Access is temporarily unavailable" when generating API Key

[RPatel6]

I'm trying to generate an API key using this guide: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-ov...

But when I hit "Generate API Key". I keep getting this message:

"Connectivity to Prisma Access is temporarily unavailable"

Anyone else get this?

[BenWidmer]

It could be a temporary issue, but if it persists you may want to confirm that the traffic isn't getting blocked between Panorama and Prisma Access.  You will want to whitelist the following URLs and Ports:

1. api.gpcloudservice.com (for Prisma Access)
2. api.paloaltonetworks.com (for Prisma Access)
3. apitrusted.paloaltonetworks.com (for Prisma Access)
4. Ports 443 and 444 outbound

If you have a Palo Alto Networks firewall between Panorama and the Internet you could use the paloalto-logging-service and paloalto-shared-services App-IDs to allow this traffic.

References:

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-pris...

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prepare-the-pris... (Note at the bottom regarding App-IDs or ports)