About MartinE

I'm considering using Directory Sync for my Panorama-managed Prisma access tenant and would like to clarify certain aspects of using Directory Sync. - Is there a recommended number of Cloud Identity agent hosts to be deployed? - Palo Alto's documentation says the certificates generated using the Cloud Identity Engine apps expires 3 months from issuance date and renews automatically for version 1.5.0 and above. Are there specific ports or app-IDs that need to be allowed in policy to ensure automatic renewal? - In Panorama, when Directory Sync is enabled, a warning message is displayed saying: "After you enable Directory Sync, Prisma access obtains its user and group mapping information from the Directory Sync Service only, and any existing user and group mapping settings will be ignored".     - Given the above error, does that mean there's the possibility of a temporary outage while the firewalls lose/clear any previous AD group information from LDAP profiles and update their information using Directory Sync?     - If there are already policies in place that have been configured using the long-form Distinguished Name, will enabling Directory Sync affect the existing configured policies?   Thanks. ... View more

I have a few users reporting problems with opening some web pages in internet explorer (IE) when connected to GlobalProtect. Clicking on the email link simply opens up a blank page in IE. When the same link is pasted in Chrome, it works OK. When using Cisco AnyConnect, the problem with IE does not occur and email links open as normal.   Has anyone seen a similar issue? Any suggestions of a possible fix? ... View more

Hi, Is there a way to monitor and set up email alerting for Cortex Data lake and VPN user count in Prisma access if a defined threshold is reached? ... View more