Question
On Panorama, when configuring Prisma Access, "Internal Host Detection" is seen at two locations
Panorama > cloud service plugin > mobile users > configuration > onboarding > general tab > internal host detection. Configure Prisma Access for Users
Network > GlobalProtect > portals > agent tab > configs > internal > internal host detection GlobalProtect Portals Agent Internal Tab
Answer
We only use the first option for onboarding. Once on board, use the second option for all further changes. This is to support a variety of customer installations. The value provided during onboarding is reflected under "DEFAULT" Agent config. This is to support simple configuration with one agent config.
The Panorama interface also supports adding multiple agent configs based on user groups or device types. The above second option provides the ability to add "Internal Host Detection" configuration for each agent config. Refer to "Step 2" of the following URL for this config: Configure Prisma Access for Users.
... View more