Building security policies in Strata Cloud Manager
When you’re logged in to Strata Cloud Manager, which you can access via https://apps.paloaltonetworks.com or https://stratacloudmanager.paloaltonetworks.com, you can navigate to Manage | Configuration | NGFW and Prisma Access to access the security rule bases, which is split up into the following sections:
- Security Services constitute the security rules used to control which traffic is allowed and all of the deep packet (layer 7) inspection elements that can be applied to these sessions.
- Network Policies is where you can create application override policies. These are used to bypass App-ID for traffic flows that can’t be identified, need to be identified as something else, or to prevent L7 inspection from happening on these flows.
- Identity Services is where you can configure and control user ID ingestion and redistribution.
- Objects is where all the user-created objects, such as address objects, groups...
