Purchase the Mobile Users license in order to use ADEM to monitor your Mobile
Users.
Where Can I Use This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
Strata Cloud Manager
Prisma Access
license
Autonomous DEM
license
Autonomous DEM
is supported on GlobalProtect app version 5.2.11 or later running on Windows
or macOS endpoints only. The following operating system versions are supported:
Operating System
Supported Versions
macOS
10.15 and newer
Windows
Windows 10, Build 1809 and newer
To enable Autonomous Digital Experience Management (ADEM) for your
Prisma Access
mobile users, you must already have a
Prisma Access
for Users license. You can then
apply your ADEM license to your Windows and macOS users to enable them to run synthetic
tests that continuously monitor your users’ digital experience on those apps.
Use Cloud Managed
Prisma Access
or the 2.0 or above Innovation Release of Panorama Managed
Prisma Access
with an active
Prisma Access
for Users license.
Purchase an
Autonomous DEM
license for your mobile users.
If you purchased an
Autonomous DEM
license with a new
Prisma Access
subscription, you
activate ADEM during the
Prisma Access
activation process. If you purchased
an add-on
Autonomous DEM
license for an existing
Prisma Access
subscription, activation occurs automatically.
With an active ADEM
license, you can configure up to 10 synthetic tests per user.
Verify that the users for which you want to enable ADEM are running a compatible version of the
GlobalProtect app.
ADEM requires GlobalProtect app version 5.2.11 or later and is
only supported on Windows and macOS endpoints.
When you connect in pre-logon mode, your application
performance data won't be displayed in any charts that show ADEM monitoring. ADEM
monitoring will be disabled, hence that will reflect on the user monitoring charts.
Once the user logs in, synthetic monitoring will restart and all the Network
Performance Metrics and Application Performance Metrics will be tracked again. and
ADEM will begin to show synthetic test results for this user. The
Monitored Mobile User Devices
table on the
Monitored Mobile Users
page will only display the ID of
the user that was used to authenticate to the logon mode.
If the user switches
from pre-logon mode to user-logon mode, synthetic monitoring will restart and
all the Network Performance Metrics and Application Performance Metrics will be
tracked again.
Configure security policy to allow your ADEM-enabled GlobalProtect users to connect to the ADEM
service and run synthetic tests.
Required security policy includes allowing
access to HTTPS, TCP, and ICMP. Optionally, you may also need to allow access to
HTTP, depending on how you plan to configure your app tests.
Use the
Autonomous DEM
SASE Health
and
Application Experience
dashboards within the
Strata Cloud Manager
console to get a sense of the baseline
digital experience score for your SASE environment as a whole, and for each
individual application.
Even before you begin configuring app tests to monitor
specific applications, you can use the
Application
Experience
dashboard to get an overall view of the applications
in use across your network and use this information to decide which applications
you want to monitor.
Add app tests for the users and applications you want to monitor.
Use the ADEM dashboards to monitor the digital experience of
users and applications across your SASE environment and use the
information to troubleshoot issues as they arise.