Enable ADEM in Panorama Managed Prisma Access for Remote
Sites
Based on your capacity planning, you allocate
your Remote Networks bandwidth licenses on Prisma Access for each
compute location. The unit of measure for bandwidth licenses is
Mbps.
Below
are some points to consider when allocating bandwidth for ADEM:
- When enabling ADEM on a compute location, the amount of ADEM bandwidth allocated on a compute location will mandatorily be equal to the bandwidth that you had already allocated for Remote Networks (seeBandwidth Allocation (Mbps)column) on Prisma Access for that compute location.As soon as you enable ADEM on a compute location, the same amount of bandwidth allocated for Remote Network is automatically deducted from the overall ADEM pool of bandwidth licenses (shown byAutonomous DEM Allocated Total).
- TheAutonomous DEM Allocated Totalshows you how much bandwidth has already been consumed by ADEM and how much is remaining.
- For any compute location, you canEnableADEM only if you have enough ADEM bandwidth license available in the overall ADEM bandwidth pool (shown inAutonomous DEM Allocated Total) matching the allocated Remote Networks bandwidth. For example, if you are trying toEnableADEM on a compute location where 100 Mbps of Remote Networks bandwidth is allocated, if your ADEM pool of licenses does not have at least 100 Mbps bandwidth available, you won't be able to enable ADEM on that compute location unless you add more ADEM bandwidth license to overall pool.
- Also, when ADEM is enabled on a particular compute location, if you increase or decrease the amount of Remote NetworksBandwidth Allocation (Mbps)on that compute location, it will correspondingly increase or decrease the overall bandwidth in the ADEM pool of licenses (Autonomous DEM Allocated Total).
- When youEnableADEM on a compute location, all the sites that connect to the compute location get ADEM enabled and those Prima SD-WAN sites can connect to the ADEM portal. Hence all those sites can be monitored.
- After you have enabled ADEM on a compute location, if you would like to free up some ADEM bandwidth to allocate to some other compute location, you can deselect theEnablecheck box. Doing so will release that bandwidth back to the ADEM pool of licenses, but it will also disable ADEM on the compute location which results in synthetic test monitoring to be stopped on all sites connected to that compute location.
To enable
Autonomous DEM for the compute location, follow these steps:
- Open Panorama.
- In the left panel, expandCloud Servicesand select .
- Edit theAggregate Bandwidth and Autonomous DEM Settings.
- Enablethe compute locations for which to allocate the bandwidth for ADEM.TheAutonomous DEM Allocationcolumn will be visible only if you have purchased the ADEM for Remote Networks license.
- ClickOK.
- Add the following URLs to make the SD-WAN site register to the ADEM portal:
- In Panorama, go to . Click onAddand add the following ADEM Service Destination FQDNs.
- agents.dem.prismaaccess.com
- agents.jp1.ap-northeast-1.dem.prismaaccess.com
- agents.sg1.ap-southeast-1.dem.prismaaccess.com
- agents.au1.ap-southeast-2.dem.prismaaccess.com
- agents.ca1.ca-central-1.dem.prismaaccess.com
- agents.eu1.eu-central-1.dem.prismaaccess.com
- agents.uk1.eu-west-2.dem.prismaaccess.com
- agents.us1.us-east-2.dem.prismaaccess.com
- updates.dem.prismaaccess.com
- agents.in1.ap-south-1.dem.prismaaccess.com
- Create an address group to contain the addresses above by going to , clickingAddand providing a name for the address group.
- Add the address group you just created into the security policy. Go to . ClickAddand add the address group to the policy.
