Create a Natural Language Query
Focus
Focus
Autonomous DEM

Create a Natural Language Query

Table of Contents

Create a Natural Language Query

Learn how to create natural language query for Access Analyzer.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
  • Prisma Access license
  • ADEM or Strata Cloud Manager Pro license
Example Questions shows examples of the natural-language queries that Access Analyzer supports. You select each word or group of words that appear in the Question field on the Access Analyzer page (MonitorAccess Analyzer). Variables are enclosed in wickets and can be a field name you can select or information you need to enter.

User Issues

  • Can < mobile user > access < application domain / IP address > from < PA Location > ?
    • You can select a user from the < mobile user > choices that appear or enter a username.
    • You need to enter a relevant < application domain / IP address >, which is www.salesforce.com in the following example.
    • You can select a < PA Location > from the choices that appear or enter a Prisma Access location. By default, the query will be automatically populated with the user's last used gateway.
    • Select a < device name > from the choices that appear or enter a device name. If only a single device exists, the query will be automatically populated with that device.
    • (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.

Location Issue

  • Can mobile users access <application domain / IP address > from < PA Location > ?
    • You need to enter a relevant < application domain / IP address >, which is www.salesforce.com in the following example.
    • You can use the last connected Prisma Access location or enter a specific < PA Location >.
    • (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.

Site Issue

  • Can < branch site > users access < application domain / IP address > from < Source IP Prefix > ?
    • You need to enter a relevant <application-name>, which is www.salesforce.com in the following example.
    • You can select a < branch site > from the choices that appear or enter a site name.
    • Enter the source IPv4 or IPv6 address prefix using the format 11.2.3.4 or 11.2.3.4/11.
    • (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.

Secure Access Issues

  • Is mobile user < username > connected to VPN?
    • You can select a < username > from the choices that appear or enter a username.
    • Select a < device name > from the choices that appear or enter a device name. If only a single device exists, the query will be automatically populated with that device.

Device Posture Issues

  • Show me configured profiles?
    • Get a list of HIP profiles for the tenant.
  • Show me users < matching | not matching > < HIP Profile(s) (#) > ?
    • Select whether you want to a list of users to match or not match one or more HIP Profiles. You can select And or Or and any number of HIP Profiles in the variables drop down.