>
    Strata Copilot
    ADEM Data Collection
    Focus
    Download PDF
    Focus
    1. Home
    2. Autonomous DEM
    3. ADEM Data Collection
    Download PDF
    Autonomous DEM

    ADEM Data Collection

    Table of Contents

    ADEM Data Collection

    Learn about the metrics that the ADEM agent collects from the user's workstation in order to provide actionable insights into the workstation, network, path and application performance
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • Prisma Access license
    • Autonomous DEM license
    The ADEM agent collects metrics from the user's workstation in order to provide actionable insights into the workstation, network, path and application performance. The metrics collected are:
    • User Sessions
      • GlobalProtect username
      • GlobalProtect Login / Logout time
      • GlobalProtect status
      • Prisma Access location
      • User geographical local
      • Service provider name
    • BIOS
      • Serial number
    • Computer
      • Hostname
      • Model
      • Manufacturer
      • Battery
    • Network
      • Hostname
      • Network interfaces
      • IPv4 and IPv6 address
      • Public IP Address
      • MAC address
      • Default gateway
      • WiFi Signal Quality
      • WiFi Tx Speed
      • WiFi Rx Speed
      • WiFi Channel
      • WiFi Network SSID
      • WiFi Network BSSID
    • VPN Network
      • VPN Interface
      • VPN Gateway ID/Hostname
      • Network interfaces
    • Operating System
      • OS type
      • Version
      • OS architecture
    • Logical Devices
      • Device ID
      • Device type
      • Media type
      • Size
      • Name
      • Volume name
      • Volume serial number
      • Filesystem count
      • Filesystem storage size
      • Filesystem usage
    • CPU
      • Architecture
      • Core count
      • Logical processor count
      • Manufacturer
      • Max clock speed (Except on Apple Silicon)
      • Name
    • RAM
      • Memory module capacity (Windows only)
      • Total Capacity
    • Synthetic Test Results
      • Network Latency
      • Network Jitter
      • Network Loss
      • DNS resolution times
      • TCP Latency
      • SSL Latency
      • Server Response Time
    • Browser-Based Real User Monitoring (RUM) Metrics
      • Core Web Vitals
        MetricsDescription
        CLSCumulative Layout Shift (visual stability score)
        FCP
        First Contentful Paint (ms)
        FIDFirst Input Delay (ms)
        INPInteraction to Next Paint (ms)
        LCP
        Largest Contentful Paint (ms)
        TTFB
        Time to First Byte (ms)
      • User Interaction Data- Per-interaction records captured via the Event Timing API
        MetricsDescription
        ElementXPath of the element the user interacted with
        Interaction DurationHow long the interaction took (ms)
      • Resource Timing Data - Per-resource records for same-origin resources (or those with Timing-Allow-Origin)
        Metrics
        Resource URL
        Resource TTFB (ms)
        HTTP Response Code
        Transfer Size (bytes)
      • Request Errors - Connection failures and HTTP errors (4xx/5xx) on both main page and sub resources
        MetricsDescription
        Error Type
        CONNECTION (net::ERR_*) or HTTP (status code)
        Error CodeSpecific error string or HTTP status
      • Navigation Timing Data
        MetricsDescription
        RDIRRedirection time (ms)
        Worker Start to Fetch StartTime from service worker start to fetch start (ms)
        Fetch Start to Domain Lookup StartInferred cache time for service worker fetch events (ms)
        DNSDNS lookup time (ms)
        TCPTCP handshake (connect) time (ms)
        TLSTLS/SSL handshake time (ms)
        SRTServer Response Time (ms)
        DTTData Transfer Time (ms)
        DCLDOM Content Loaded time (ms)
        TLTTotal Load Time (ms)
        First Byte TimeTime to first byte (ms)
        HTML Download TimeTime to download the HTML document (ms)
        DOM Building TimeTime to build the DOM tree (ms)
        DOM Ready TimeTime until DOM is ready (ms)
        Load Event DurationDuration of the load event (ms)
        End User Response TimeTotal perceived response time (ms)
        Post Page Load TimeTime after page load completes (ms)
        Visually Complete TimeEstimated time when page is visually complete (ms)
        Resource Fetch TimeTime to download external resources (CSS, JS, images, fonts) (ms)
        Latest LCPCurrent largest contentful paint time (ms)
        Resource Last End TimeTime when last resource finished loading (ms)
      • Navigation Timing Absolutes
        MetricsDescription
        Navigation Start TimeAbsolute start time of navigation
        Network Response Start TimeAbsolute time when response started
        Network Response End TimeAbsolute time when response ended
        DOM Interactive TimeAbsolute time when DOM became interactive
        DOM Content Loaded End TimeAbsolute time when DCL event ended
        Load Event Start TimeAbsolute time when load event started
        Load Event End TimeAbsolute time when load event ended
        DOM Complete TimeAbsolute time when DOM construction completed

    FQDNs Used by ADEM

    The ADEM Client sends the data collected to the ADEM Portal. As such the following FQDNs may need to be whitelisted and/or excluded from SSL decryption:
    • agents.dem.prismaaccess.com
    • updates.dem.prismaaccess.com
    • features.dem.prismaaccess.com
    • agents-prod1-us-west2.dem.prismaaccess.com
    • agents-sg1-asia-southeast1.dem.prismaaccess.com
    • agents-au1-australia-southeast1.dem.prismaaccess.com
    • agents-jp1-asia-northeast1.dem.prismaaccess.com
    • agents-ca1-northamerica-northeast1.dem.prismaaccess.com
    • agents-eu1-europe-west4.dem.prismaaccess.com
    • agents-uk1-europe-west2.dem.prismaaccess.com
    • agents-in1-asia-south1.dem.prismaaccess.com
    • agents-de1-europe-west3.dem.prismaaccess.com
    • agents-ch1-europe-west6.dem.prismaaccess.com
    • agents-fr1-europe-west9.dem.prismaaccess.com
    • agents-es1-europe-southwest1.dem.prismaaccess.com
    • agents-pl1-europe-central2.dem.prismaaccess.com
    • agents-il1-me-west1.dem.prismaaccess.com
    • agents-it1-europe-west8.dem.prismaaccess.com
    • agents-kr1-asia-northeast3.dem.prismaaccess.com
    • agents-tw1-asia-east1.dem.prismaaccess.com
    • agents-qa-prod1-me-central1.dem.prismaaccess.com
    • agents-id1-asia-southeast2.dem.prismaaccess.com
    • agents-ae1-europe-west3.dem.prismaaccess.com
    • agents-cn1-asia-southeast1.dem.prismaaccess.com
    • agents-sa1-me-central2.dem.prismaaccess.com
    • agents-za1-africa-south1.dem.prismaaccess.com
    • agents-br1-southamerica-east1.dem.prismaaccess.com

    FQDNs Used by ADEM Universal Agent

    The following FQDNs may need to be whitelisted and/or excluded from SSL decryption:
    • agents-jwt-prod1-us-west2.dem.prismaaccess.com
    • agents-jwt-sg1-asia-southeast1.dem.prismaaccess.com
    • agents-jwt-au1-australia-southeast1.dem.prismaaccess.com
    • agents-jwt-jp1-asia-northeast1.dem.prismaaccess.com
    • agents-jwt-ca1-northamerica-northeast1.dem.prismaaccess.com
    • agents-jwt-eu1-europe-west4.dem.prismaaccess.com
    • agents-jwt-uk1-europe-west2.dem.prismaaccess.com
    • agents-jwt-in1-asia-south1.dem.prismaaccess.com
    • agents-jwt-de1-europe-west3.dem.prismaaccess.com
    • agents-jwt-ch1-europe-west6.dem.prismaaccess.com
    • agents-jwt-fr1-europe-west9.dem.prismaaccess.com
    • agents-jwt-es1-europe-southwest1.dem.prismaaccess.com
    • agents-jwt-pl1-europe-central2.dem.prismaaccess.com
    • agents-jwt-il1-me-west1.dem.prismaaccess.com
    • agents-jwt-it1-europe-west8.dem.prismaaccess.com
    • agents-jwt-kr1-asia-northeast3.dem.prismaaccess.com
    • agents-jwt-tw1-asia-east1.dem.prismaaccess.com
    • agents-jwt-qa-prod1-me-central1.dem.prismaaccess.com
    • agents-jwt-id1-asia-southeast2.dem.prismaaccess.com
    • agents-jwt-ae1-europe-west3.dem.prismaaccess.com
    • agents-jwt-cn1-asia-southeast1.dem.prismaaccess.com
    • agents-jwt-sa1-me-central2.dem.prismaaccess.com
    • agents-jwt-za1-africa-south1.dem.prismaaccess.com
    • agents-jwt-br1-southamerica-east1.dem.prismaaccess.com

    © 2026 Palo Alto Networks, Inc. All rights reserved.