Policy Object: Quarantine Device Lists
Focus
Focus

Network Security

Policy Object: Quarantine Device Lists

Table of Contents

Policy Object: Quarantine Device Lists

Where Can I Use This?
What Do I Need?
  • NGFW (Cloud Managed)
  • NGFW (PAN-OS & Panorama Managed)
  • Prisma Access (Cloud Managed)
  • Prisma Access (Panorama Managed)
Check for any license or role requirements for the products you're using:
  • Prisma Access license or AIOps for NGFW license
Prisma Access allows you to identify and quarantine compromised devices that are connected with the GlobalProtect app. You do this by either manually or automatically adding devices to a quarantine list. After you quarantine the device, you can block the quarantined device from accessing the network to ensure consistent policy.
Each Prisma Access mobile user location sends and receives its quarantine information between the Panorama that manages Prisma Access and its nearest service connection. If you have next-generation firewalls or gateways, you should have the service connection redistribute the quarantine list information to and from Panorama and the on-premises firewalls or gateways. You should also redistribute the quarantine list information from Panorama to the service connection to ensure consistent policy enforcement for all mobile user locations (gateways) in Prisma Access.
A device appears in the quarantine list as a result of the following actions:
  • The system administrator added the device to this list manually.
  • The device was added to the quarantine list automatically.
    • Using a log forwarding profile with a security policy rule whose match list had a built-in action set to Quarantine.
    • Using HIP match log settings with built-in action set to Quarantine.
  • The device was added to the quarantine list using an API.
  • The quarantine list was received as a part of redistributed entry (the quarantine list was redistributed from another Panorama appliance).
Here's how to get started with Quarantine Device Lists.

Recommended For You