Autonomous DEM
Create a Natural Language Query
Table of Contents
Create a Natural Language Query
Learn how to create natural language query for Access Analyzer.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Example Questions shows examples of the natural-language
queries that Access Analyzer supports. You select each word or group of words that
appear in the Question field on the Access
Analyzer page (). Variables are enclosed in wickets and can be a field name you
can select or information you need to enter.
User Issues
This query provides insights into historical Traffic logs for the matched security
policy rule.
- Can < mobile user > access < application domain / IP address > from < PA Location > ?
- You can select a user from the < mobile user > choices that appear or enter a username.
- You need to enter a relevant < application domain / IP address >, which is www.salesforce.com in the following example.
- You can select a < PA Location > from the choices that appear or enter a Prisma Access location. By default, the query will be automatically populated with the user's last used gateway.
- Select a < device name > from the choices that appear or enter a device name. If only a single device exists, the query will be automatically populated with that device.
- (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.
![]()
User Issues (Security Policy Configuration Only)
The query is similar to the User Issues query, except that the query checks
only for the configurations of security policy that denied access to an
application.
- Can < mobile user > access < application domain / IP address > from < PA Location > ?
- You can select a user from the < mobile user > choices that appear or enter a username.
- You need to enter a relevant < application domain / IP address >, which is www.salesforce.com in the following example.
- You can select a < PA Location > from the choices that appear or enter a Prisma Access location. By default, the query will be automatically populated with the user's last used gateway.
- Select a < device name > from the choices that appear or enter a device name. If only a single device exists, the query will be automatically populated with that device.
- (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.
![]()
Location Issue
- Can mobile users access <application domain / IP address > from < PA Location > ?
- You need to enter a relevant < application domain / IP address >, which is www.salesforce.com in the following example.
- You can use the last connected Prisma Access location or enter a specific < PA Location >.
- (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.
![]()
Site Issue
- Can < branch site > users access < application domain / IP address > from < Source IP Prefix > ?
- You need to enter a relevant <application-name>, which is www.salesforce.com in the following example.
- You can select a < branch site > from the choices that appear or enter a site name.
- Enter the source IPv4 or IPv6 address prefix using the format 11.2.3.4 or 11.2.3.4/11.
- (Optional) You can check Include Application ID? or Include Service? to include a relevant App-ID or limit the port numbers.
![]()
Secure Access Issues
- Is mobile user < username > connected to VPN?
- You can select a < username > from the choices that appear or enter a username.
- Select a < device name > from the choices that appear or enter a device name. If only a single device exists, the query will be automatically populated with that device.
![]()
Device Posture Issues
- Show me configured profiles?
- Get a list of HIP profiles for the tenant.
- Show me users < matching | not matching > < HIP
Profile(s) (#) > ?
- Select whether you want to a list of users to match or not match one or more HIP Profiles. You can select And or Or and any number of HIP Profiles in the variables drop down.
![]()
