05-06-2026 06:39 PM
Hi,
Currently deploying Prisma Access China. No service connection license, hence, PANW on-prem FW is added as External Gateway. I have enabled and configured PAC file. I'm expecting that internet traffic will pass through Prisma Access but upon checking, it passes through on-prem firewall (checked by using ipchicken.com). I have attached the configured forwarding rules. Thanks in advance!
05-10-2026 04:22 AM - edited 05-10-2026 04:23 AM
Check your internal host detection and maybe see GlobalProtect Internal Host Detection with Always-On and Enforcement as Pre-logon or User-logon are needed for internal host detection.
The globalprotect network logs GlobalProtect will give you more info if needed,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
