Prisma Access
Prisma Access Internal Gateway (Strata Cloud Manager)
Table of Contents
Expand All
|
Collapse All
Prisma Access Docs
-
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
-
-
-
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Prisma Access Internal Gateway (Strata Cloud Manager)
Prisma Access
Internal Gateway (Strata Cloud Manager
)Learn how to set up the
Prisma Access
internal gateway and its
requirements.Complete the following steps to set up the
Prisma Access
internal gateway.- Notice that there are no internal host detection and internal gateway configurations at present.
- Make a note of theRemote Networks DNS IP Addressfrom.WorkflowsPrisma AccessSetupPrisma Access
- Make a note of theGateway FQDNsfrom.WorkflowsPrisma AccessSetupGlobalProtectInfrastructureInfrastructure SettingsGateway FQDNs
- Select.WorkflowsPrisma AccessSetupRemote NetworksAdvanced Settings
- Edit the settings ofto enable the internal gateway andPrisma AccessInternal GatewaySavethe changes.(Optional)Enable Internal Host Detectionfor IPv4 if you don't want to use your own DNS server. You can enable the internal host detection only after you selectEnable Internal Gateway.When you enable the internal gateway, the remote network instances act as internal gateways. When you enable the internal host detection,Prisma Accesscreates PTR records on the remote network DNS proxy servers for the internal host detection process.
- Select.WorkflowsPrisma AccessSetupGlobalProtectGlobalProtect App
- Select an app setting and view the internal host detection details and internal gateway details.When you enable the internal gateway and internal host detection in step 5, Prisma Access enables IPv4 internal host detection and internal gateway here as well.Prisma Accesspopulates theRemote Networks DNS IP Addressvalue, from step 2, as the IP address.You can't remove thisNote that IPv6 internal host detection onPrisma AccessDNS proxies isn't supported.entry. However, you can add your self-deployed internal gateways. You can deploy your own DNS servers in the internal network for internal host detection, but ensure to add PTR records so that the internal host detection is possible.Prisma AccessInternal GatewayPrisma Accessappends theGateway FQDNsvalue, from step 3, to the address.You can view the DNS proxy server IP address details by selecting.WorkflowsPrisma AccessSetupPrisma AccessIf you enableInternal Host Detection, verify that the DNS resolution is working, perform a reverse DNS lookup from your internal network to DNS proxy server IP, and ensure it returns an FQDN starting withany-igw.
- Pushthe changes to mobile users and remote networks at the same time.
- Log into the endpoint.When you connect to GlobalProtect, first you authenticate with the GlobalProtect portal. The internal host detection triggers GlobalProtect to connect to the internal gateway. Then, as GlobalProtect agent continues to operate in the non-tunnel mode, the second authentication appears and submits the host information to the internal gateway on remote networks.