SaaS Application Path Monitoring
Table of Contents
10.0 (EoL)
Expand all | Collapse all
-
- Automatic Content Updates Through Offline Panorama
- Enhanced Authentication for Dedicated Log Collectors and WildFire Appliances
- Syslog Forwarding Using Ethernet Interfaces
- Increased Configuration Size for Panorama
- Access Domain Enhancements for Multi-Tenancy
- Enhanced Performance for Panorama Query and Reporting
- Log Query Debugging
- Configurable Key Limits in Scheduled Reports
- Multiple Plugin Support for Panorama
End-of-Life (EoL)
SaaS Application Path Monitoring
Configure a Software-as-a-Service (SaaS) Quality profile
to specify a SaaS application for a hub firewall with a Direct Internet
Access (DIA) link.
If your branch firewall has a Direct Internet
Access (DIA) link to a Software-as-a-Service (SaaS) application,
create a SaaS Quality profile to specify how one or more SaaS applications
should be monitored. SaaS Quality profiles are associated with an
SD-WAN policy rule to determine how the branch firewall determines the
path quality thresholds for latency, jitter, and packet loss and
selects the preferred path for an outgoing packet.
The SaaS
Quality profile supports up to four static IP addresses, or one
fully qualified domain name (FQDN) or URL per SaaS Quality profile.
When multiple static IP addresses are configured, the branch firewall
monitors one IP address at a time in a cascading order based on
how the IP addresses are ordered in the SaaS Quality profile. For
example, if you add IP1, IP2, IP3, and IP4, the branch firewall
monitors IP1 to determine if the path quality thresholds have been
exceeded, then continues to IP2, and so forth.
- Selectand specify theObjectsSD-WAN Link ManagementSaaS Quality ProfileDevice Groupcontaining your SD-WAN configuration.
- Adda new SaaS quality profile.
- Enter a descriptiveNamefor the SaaS Quality profile.
- (Optional) Enable (check)Sharedto make the SaaS Quality profile shared across all device groups.
- (Optional) Enable (check)Disable overrideto disable overriding the SaaS Quality profile configuration on the local firewall.Disable overridecan only be enabled ifSharedis disabled in the previous step.
- Configure the SaaS Monitoring Mode.
- Automatically monitor the SaaS application path health.Enabled by default,Adaptivemonitoring allows the branch firewall to passively monitor the SaaS application session for send and receive activity to determine if the path quality thresholds have been exceeded. The SaaS application path health quality is automatically determined without any additional health checks on the SD-WAN interface.Adaptive SaaS monitoring is supported only for TCP SaaS applications.
- Configure the Static IP address for the SaaS application.
- SelectandIP Address/ObjectStatic IP AddressAddan IP address.
- Enter the IP address of the SaaS application or select a configured address object.
- Enter theProbe Intervalby which the branch firewall probes the SaaS application path for health information.
- ClickOKto save your configuration changes.
- Configure the fully qualified domain name (FQDN) for the SaaS application.
- Configure a FQDN address object for the SaaS application.
- SelectandIP Address/ObjectFQDNAddthe FQDN.
- Select theFQDNaddress object for the SaaS application.
- Enter theProbe Intervalby which the branch firewall probes the SaaS application path for health information.
- ClickOKto save your configuration changes.
- Configure the URL for the SaaS application.URL monitoring is only supported for traffic over ports 80, 443, 8080, 8081, and 143.
- SelectHTTP/HTTPS.
- Enter theMonitored URLof the SaaS application.
- Enter theProbe Intervalby which the branch firewall probes the SaaS application path for health information.
- ClickOKto save your configuration changes.
- Configure an SD-WAN policy rule and associate the SaaS Quality profile with the SD-WAN policy rule in theApplication/Servicetab.
- SelectCommitandCommit and Pushyour configuration changes.
- Monitor SaaS application health performance.
- Selectand view impacted application or link performance.PanoramaSD-WANMonitoring
- Select an application or link that hasSaaS MonitoringEnabled.
- View theTraffic CharacteristicsandLink Characteristics.