Prisma Access Validation Error Quarantine List

[Sarc845]

Hello Everyone,

Has anyone ever seen this commit error before?

Validation Error:

• plugins -> cloud_services -> service-connection -> quarantine-list-redistribution unexpected here
• plugins -> cloud_services -> service-connection is invalid

Little confused as there is no quarantine list feature here?

[nikoolayy1]

Better check your Service connection as Prisma by default tries to do redistribution of user-id, HIP info and other stuff:

Redistribute User-ID Information Between Prisma Access and On-Premise Firewalls (paloaltonetworks.co...

Configure the Service Infrastructure (paloaltonetworks.com)

Please see:

Identification and Quarantine of Compromised Devices Using Prisma Access (paloaltonetworks.com)

Check if you have enabled the quarantine redistribution and also you need a service object in Prisma a routing and redistribution point between the the mobile gateways and you don't need to connect the service object your on Prem Data Center but just to have it as a redistribution point.

[Sarc845]

Thanks for the input, its not setup. So will probably escalate to panw

[nikoolayy1]

Ok but have you checked if you have a valid service object in Prisma Access "

• plugins -> cloud_services -> service-connection is invalid

"

Manage Prisma Access Service Connections (paloaltonetworks.com)

[Sarc845]

Hi Nikolay,

Yep, checked the service connections. Nothing strange there.

[nikoolayy1]

If you have not enabled quarantine distribution and you have a legitimate service connection then yes it seems like a bug issue.

You can still check the link below for known issues for Prisma Access 2.2:

Prisma Access Known Issues (paloaltonetworks.com)