Unable to get Internet After installing Global protect Prisma Access

[F.Koujalgi]

Hi Team,

I raised and eval trail license for practice Prisma access i go through with the tech docs i configure subnet infra and also i configure the global protect installed it on my machine 6.2.x connected successfully with local user. Now i tried to get internet access it showcased this site cant be reach i created security policy as well. but issue is same please let me know if i miss something in this

[domari]

You noted that globalprotect is connecting, however, once connected there is no internet access? Please confirm. 

Regarding the security rule created for Globalprotect access to the internet under mobile user device group: 

• Is the source zone 'trust' and destination zone 'untrust'?
• Do you have any specific applications configured in the security rule or any specific services (ports) configured?
• Any userID configured? or URL categories? 

 
If you can please share what the security rule contains and its location among the ruleset. 

[F.Koujalgi]

Please let me know if I need to create Web security policy or security policy to enforce the policy I selected any any zone and some URL category allowed ans blocked. 

[domari]

I am specifically referring to security policies not web security policy. However, if you have enabled and configured web security then you need to make sure that you go over the details in the documents below to understand how enabling this feature will affect web traffic and the enforcement of security rules on web traffic. 

https://docs.paloaltonetworks.com/network-security/security-policy/administration/web-security

https://docs.paloaltonetworks.com/network-security/security-policy/administration/web-security/defau...

https://docs.paloaltonetworks.com/network-security/security-policy/administration/web-security/creat...

[F.Koujalgi]

Hi I just want to access normal internet what should i do should i create secuirty policy than Web policy i confused as i worked on Other sase solution their is only one policy tabs now here is two Security and Web. so which i should go first should Below is the configured policy.   

[domari]

You are currently in the "Global" Configuration scope. If you go to the "GlobalProtect" configuration scope. That give you an overall view of the security policies configured for your globalprotect users. Can you please check the policies there.