Our HQ currently uses dual ISPs for internet access and has VPN tunnels to Prisma configured across both ISP circuits as primary and secondary VPN tunnels for a single service connection. At HQ both tunnels terminate at a Palo Alto 1420 NGFW HA pair
...
I haven't seen this anywhere in other posts or documents, so I wanted to share this as it's something I ran into recently.
TL;DR: When setting up internal domains for Prisma DNS to resolve with your internal DNS servers, you have to also add the do
...
Hi,
Not sure if this the correct place to post this but here goes.
The current user interface for ADEM is quite confusing and difficult to navigate to the point where we too setup additional traingin for our users each time its changed ( strata
...
Hello Guys,
So, we have few unused RN SPNs in our managed Prisma access panorama. I need to delete these unused Rn SPNs. For this I need to first delete the IPsec tunnels associated with each RN SPN, but for that I have to delete Phase 1 and Phase
...
I want to replace the VM-Series firewall with Prisma Access, but I need to weigh the pros and cons before moving to this setup. Therefore, I would appreciate your input in providing a solution for this SASE architecture.
Here are
Hi
The Policy Optimizer is not listing the rules created in the security policy with application set to any.
regards,
Akash Thangavel.
hello
I am using AWS by connecting to service connection. (using prisma cloud)
Is there anyone who runs both primary and secondary tunnel connecting AWS?
In my case, bgp neighbor setup was not possible due to the 169.254.0.0/16 band.
It was running s
...
Hi
Force log out users from the cloud-managed Prisma Access Gateway.
Currently logged-in users will be listed; here, we can force log out users from GP.
regards,
Akash Thangavel
Hi All
During our Vulnerability Assessment, the vendor found that our Prisma Access (SASE) VPN URL has TLS 1, 1.1 and 1.2 Enabled. and recommended to disable up to 1.2 and use 1.3 only.
I can't find that settings in Cloud Strata Manager. Any idea whe
...
Hi can any open please guide me , how to get material regarding prisma sd wan , i wan t to learn but i can't any material on internet regarding this
Hello, we would like to block cloud storage uploading by app-ID. So you can go to dropbox and download files, but security wants us to block our users ability to upload files.
Our solution is go create a custom application group, like the attached
...
Recently we have enabled SDWAN DIA setup in the firewall without the Panorama, all the routing and link switchover works fine as expected.
However we ran into the issue now, we have saas profile probing cisco.com using https when the cisco.com was no
...
We seem to get alot of false positives triggered in PRISMA , using the default Security profiles .
Example, "Brute force attacks" from Microsoft outlook clients accessing exchange online , im not even sure who the victim is, and who the threat acto
...
Anyone else facing issues with travelers using Global Protect (with enforcement on) who have a terrible time connecting to captive portals?
This seems to be especially problematic at Marriott Hotels and Regus spaces. From what I gather, if you're
...
Hi Palo Experts,
How can I check my ION system hardware status?
I am using Strada to manage my devices.
I manage to find the remote access button and navigate to CLI,
but I am unable to type this command 'show system environmentals', it doesn
...
