GSA coexistence with Palo Alto Networks

This page's changes and edits · All guidance changes

Microsoft's edit · 23 May 2025 18:43 UTC

PR review changes

Microsoft's commit message in MicrosoftDocs/entra-docs · commit cc3048a · +2 −3 lines · also on GitHub

⋯ 15 unchanged lines

1616

1717

1818

19 −## Learn about Security Service Edge (SSE) coexistence with Microsoft and Palo Alto Networks

2019

2120 Microsoft and Palo Alto Networks SSE solutions can be used together in a unified environment. When used together, you harness a robust set of capabilities from both platforms to elevate your SASE journey. The synergy between these platforms enhances security and provides seamless connectivity.

2221

⋯ 48 unchanged lines

7170 - Set up GlobalProtect for mobile users to allow remote access to private applications. For more information see the documentation for [GlobalProtect setup](https://docs.paloaltonetworks.com/prisma-access/administration/prisma-access-mobile-users/mobile-users-globalprotect/set-up-globalprotect-mobile-users).

7271 - Configure the GlobalProtect tunnel settings and app settings to work with Microsoft Entra Private DNS and bypass Microsoft Entra service Fully Qualified Domain Name (FQDN) and Internet Protocol (IP) addresses.

7372

74 −> Tunnel Settings:

73 +Tunnel Settings:

7574 1. In the **Strata Cloud Manager portal**, go to **Workflows** \> **Prisma Access Setup** \> **GlobalProtect** \> **GlobalProtect App** \> **Tunnel Settings**.

7675 1. In the **Split Tunneling** section, exclude traffic by adding the domain and routes: `*.globalsecureaccess.microsoft.com`, `150.171.19.0/24`, `150.171.20.0/24`, `13.107.232.0/24`, `13.107.233.0/24`, `150.171.15.0/24`, `150.171.18.0/24`, `151.206.0.0/16`, `6.6.0.0/16`.

7776

78 −> App Settings:

77 +App Settings:

7978 1. In the **Strata Cloud Manager portal**, go to **Workflows** \> **Prisma Access Setup** \> **GlobalProtect** \> **GlobalProtect App** \> **App Settings**

8079 1. Scroll to **App Configuration** \> **Show Advanced Options** \> **DNS** and **uncheck** the box for **Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)**

8180 > [!NOTE]

⋯ 210 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 21:50 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.