Prisma Access Discussions

Welcome to the Prisma Access Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Prisma Access Global Protect: Slow YouTube And Video Traffic

Hello Livecommunity!

I'm facing a speed issue related to video traffic like (YouTube), where videos and ads remain loading for a long time when mobile users are connected to the Global Protect Agent deployed from Prisma Access.

We're running the Global

...

Prisma Access - CIE multi profile - breaks SSO

Hello all .

Seem to be casting into an empty pool here but will try anyway.

My issue is with Multi Auth profiles using Global Protect & Prisma Access.

If you use more than one IDP you can only match against one profile , hence you can't use mu

...

Configuration of Remote network in prisma cloud with my home-office network

I have home-office with Fortigate (which is support ipsec)
I would like to set it up with remote network connection

Any document or any suggestions ?

How to troubleshoot the Prisma Access Browser Extension on Mac.

How to troubleshoot the Prisma Access Browser Extension on Mac. please help me if Any one have any idea. I m trying to install PAB extension in chrome in MAC but it not reflect on chrome extension.

Multiple IdPs for GP Authentication

Hi Team,

Today, I received a new use case from my customer.

In their Prisma Access cloud-managed environment, we have configured SAML authentication for SSL VPN connectivity.

Now, the customer has a new requirement: one of their clients needs access

...

BGP

i am activated BGP in service connection, but why in BGP status is Not Enabled, while in Monitor > Data Center BGP Status is UP.?

Prisma explicit proxy for on-premises servers?

Hi Palo experts!

Do you know if Prisma explicit proxy can be used for on-Orem servers’ internet sccess?

I have few small sites with two segments: remote networks (for users) and server subnet (which is reachable via service connection from Prisma M

...

IPSEC Tunnel Secondary is always down

We configured service connection with 2 tunnels in strata cloud manager, primary and secondary. The primary tunnel is up but the secondary tunnel is still down. For config proposals, phase1 and 2 are appropriate and match.

Is the behavior when the pr

...

Resolved! Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

Hello all,

Is it possible to enforce the use of PAB and block connections from other browsers?

The inability to restrict access to only PAB allows other browsers to connect, introducing a potential security vulnerability.

Resolved! Group app IA BLOCK

Dear all, good afternoon

Is it possible to create an app with all AI and block it in a rule?

Resolved! Policy update frequency for Prisma Access Browser

I'm looking for how long does it take to take affect to the PAB users if I change configuration for PAB on SCM.

In another words, how often does PAB refresh policy to the latest.

Even I could not find any document/KB, I found that timestamp increas

...

In an environment where IP Optimization is enabled, what are the conditions under which the Egress IP increases or decreases?

Hello Team,

IP Optimization for Mobile Users—GlobalProtect Deployments
https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-setup/retrieve-ip-addre...

IP Optimization for Mobile Users
https://svc-desc.paloaltonetworks.com/mo

...

About Activity Insights Office Users and Other Hosts counts

The following document explains Insights > Activity Insights > Users > Office Users and Other Users in Strata Cloud Manager.
Please allow me to confirm a few things that were unclear about this section.

[Activity Insights: Users]
https://docs.paloalt

...

Prisma Service Connection to Azure

Has anyone had success with the one of the default Phase1 and Phase2 configurations for VPN connectivity to Azure.

Did you have to configure a custom set of VPNs.

Any visibility to this configuration will be helpful

PRISMA ACCESS BROWSER EXTENSION (PABX)

When i deploy pabx from MDM to Endpoint users, Extension automatically installed in browser (chorme or edge ), after installed users must be login and the extension works.

in my Questions, Can the login be done automatically too? So when the pabx e

...