Block OpenAI within iTerm2, but allow through browser

Hello, I know it's silly, but we are looking to do just what the subject of this topic says. With the release of iTerm2 version 3.5.0 there are ai integrations to OpenAI. We want to block this traffic if it's from the "UserAgent: iTerm2/3.5.0", but a

issues with app id updates resulting in commit failures due to exclude 'google-drive-web' is not a valid reference

Hi Looks like the latest update breaks the application filter rule.  I had a look and it seem like the "google-drive-web' is a group and does not have an associated risk, 'google-drive-web-base' does have a risk 5 for it, I tried to create one called

Regional Blocking Prisma Access Gateways

Is anyone aware of a way to block access to Prisma Access portal/gateways? We are moving to Prisma Access for VPN access from on-prem. We block all regions to our on prem GP portal VPN via a security policy and allow access to a region as someone tra

Strata Manage Prisma Access Best Practices Documents (not a youtub link)

I am searching for specific Strata Manage Prisma Access best practices documents, not just generic best practices. I would prefer not to receive a YouTube link. I have been unable to find any references to Strata Manage Prisma Access best practices d

Prisma Access - CIE multi profile - breaks SSO

Hello all . 

Seem to be casting into an empty pool here but will try anyway. 

My issue is with Multi Auth profiles using Global Protect & Prisma Access. 

If you use more than one IDP you can only match against one profile , hence you can't use mu

Cloud Identity Engine - Multi Auth Profile

Hello All . 

Have a very simple thing I am trying to do but as ever things are not so simple with Palo . 

I'm using Prisma SASE  and this focus around this question is Cloud ID Engine & Global Protect. 

WE are AAD only with no on premise resources

Why does not "summarize-mobile-user-routes" display on running-config.xml ?　Related to PAN-232831.

Hi,

I'm using Panorama managed Prisma Access and facing PAN-232831.

(MU Pool is not advertised correctly.)

So I disabled "summarize-mobile-user-routes" for all RNs.

Then I checked running-config.xml of Panorama, "summarize-mobile-user-routes no"

Google Calendar ANd Global Protect Prisma access

We do not run Prisma access Global Protect at  our headquarters since we wish employees to access on net resources.

When Users are remote and Prisma access Global  Protect is operational our users are forced to use Global protect or else they are blo

Panorama M500 to M700 Migration with Prisma Access

Hi all,

We are planning to perform a Panorama M500 to M700 migration with Prisma Access VPN Users integrated in. What would be the best steps to do to achieve minimum downtime for the VPN Users.

For context, we are to migrate Prisma Access & CDL

Incidents coming empty to ServiceNow from Prisma Strata Cloud Manager

I am reaching out to seek assistance with an integration issue we are experiencing between Prisma Strata Cloud Manager and ServiceNow. We have successfully configured an integration between Prisma Strata Cloud Manager and our ServiceNow environment.

How to Filter logs from Strata Logging Service (CDL)

This doc will walk through how to filter log fields directly from the Strata Logging Service to limit the amount of data being sent out Log Forwarding Profiles via Syslog, HTTPS or Email.

First log into your hub instance at apps.paloaltonetworks.co

Understanding Prisma Access Syslog Header & messages

Hello Team,

I am working on Prisma Access syslog csv format. We are able to forward & receive csv logs successfully.

Now, I am trying to understand the format. I could able to understand the message part as all the field details are provided in the P

Problem DNS Resolution

Hi Guys,
I have an issue in my Prisma, its look like when i get spesific ip pool like x.x.a.a. I cant reach the server DNS.
Maybe anyone have an issue like me? I need help
Thanks!

DNS not resolving through Prisma Access for a particular domain

We have a hostname that doesn't get resolved by DNS while running through Prisma Access.  It works fine if you are off the internal network.  I know DNS is proxied via Prisma Access so I'm wondering how to fix this issue.  If I bypass DNS (entry in t