Zones in Remote Networks

[jo.schoensa]

Hi,

we are onboarding the first remote network sites and we tried to map the preexisting zones from our shared internet-policies to the trust and untrust zones.

But inside the traffic logs, we can see, that traffic from the remote networks are coming from a zone, with the name of the remote network.

I would have guest, that these are all in the "trust" zone.

Now the big question is, how to fix that, so we can use our preexisting global internet access policies?

Best Regards

Johannes

[nikoolayy1]

Better check your zone mapping to be certain. Also the link below has something that could be helpfull.

-----

When creating zones, do not use any of the following names for the zones, because these are names used for internal zones:

• trust
• untrust
• inter-fw
• Any name you use for the remote networks (remote network names are used as the source zone in Cortex Data Lake logs)

  Prisma Access logs that display a zone of inter-fw are logs used for communication within the Prisma Access infrastructure.

  --------

  https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-ov...