Proxy Support for Prisma Access and Strata Logging Service
Learn how Prisma Access supports proxies if you have
deployed a proxy server between Panorama, the Prisma Access infrastructure,
and Strata Logging Service.
If you deploy a proxy server between Panorama, the Prisma
Access infrastructure, and Strata Logging Service, refer to the following
table for details on the expected behavior:
Functionality
Support through a Proxy Server that does not perform
SSL Decryption
Support through a Proxy Server that performs
SSL Decryption
Initial onboarding to Strata Logging Service with Certificate
Revocation Status checks using OCSP
Supported
Only pass-through proxies are supported; any
proxy using SSL decryption is not supported.
Panorama Queries to Strata Logging Service for Reports
and Logs
If the proxy server is the
default route on Panorama, you cannot view the data on the ACC and MonitorLogs pages.
You
can view data on the ACC and MonitorLogs pages if Panorama has
an alternate route to the Strata Logging Service and you can bypass the
proxy server.