User Id Mapping/redistribution both in Strata and on a Windows DC

Does anyone have a step by step guide of setting up a User Id agent on a DC, mapping Ip to users and redistributing this data in Strata Cloud Manager. Currently, the User ID agent is pulling data from the servers and has IP-User entries. However, onl

SCM Essentials - No interfaces in Routing and Zones

Hi There,
Sorry if this is a stupid question, its my first palo alto deployment in Strata Cloud manager.

I have configured several layer3 interfaces and sub-interfaces and pushed them down to the firewall.

However when I go to create Zones and attach th

Strata Cloud Manager Alerts/incidents Management

Hi,

I was hoping someone could assist me or point me to a article that I might've missed.

I'm working on SCM and struggling to close incidents. I can only suppress them, however, I can see that there are closed incidents in the history. I would l

Can I use SCM Pro only for log connection purposes?

Hi

Recently a customer contacted us about purchasing Panorama or SCM Pro due to log retention issues.

Can SCM Pro be used for simple log collection, reporting, and monitoring purposes?

Otherwise, is it a prerequisite to connect SCM with the firewal

SCM GP User Certificate Renewal Process

1. Make sure to delete the old certificate on the Azure SAML IdP side
2. Then export the new SAML metadata XML

Prisma SD-WAN sites cannot connect to Prisma Access - Error "Inner ip pool usage reach limitation and need update"

We are getting an error when going to any branch site and try to connect to Prisma Access.

The error states "Inner ip pool usage reach limitation and need update"

We have added an additional subnet and still the issue remains.

This is under Manag

ztna connector about

Q1：Why doesn't the tunnel come up when I install the ZTNA connector on VMware?

Q2：After initially configuring the ztna connector, is it normal for the tunnel status to be down?

SSPM Github Enterprise

Wondering if Palo SSPM covers both Github Enterprise Cloud and Server. Anyone successfully using both configuration and identity for Enterprise Cloud

Prisma access

Hi,

I want to use the GP agent also with our offices.

when users are at home - everything goes to Prisma cloud.

when users are at the office just the WAN traffic (which is everything but 5 domain names) will go to the Prisma cloud.

the users

Strata API request to list all devices

Hello,

I did request the token using client_id, Secret_id and TSG id. once token created, I launched the following api request as per pan-dev documentation

curl -L "https://api.strata.paloaltonetworks.com/config/setup/v1/devices" -H "Accept: applicatio

Prisma Access/Cloud Identity Engine with Okta IDP – Issue with Group Changes

We're encountering an issue when moving users between Okta groups. In the Cloud Identity Engine (CIE), we observe that the user's group membership updates correctly. However, the firewall is not reflecting this change; the user loses access permiss

Policy Analyzer

Does PA have a tool like Policy Analyzer that I can run if I don't user Strata Cloud Manager? We are still using Panorama and direct firewall management but would like an automated tool to look over our policies.

Custom Report on Specific Rule and User Group in Strata Cloud Manager

Hi Experts,

I’m trying to generate a report in Strata Cloud Manager focusing on a specific security rule and a particular Active Directory (AD) user group. My goal is to understand usage patterns, specifically related to Online Storage, Public Email,