New Features - Autonomous DEM - September 2026

To pinpoint exactly which hop introduces latency across HTTP 3xx redirect chains during web tests, Autonomous DEM (ADEM) now captures metrics at each redirect hop. Previously, ADEM synthetic tests followed redirects silently without providing per-hop visibility into the latency. The ADEM web test follows redirect chains up to 10 hops, capturing DNS resolution time, TCP connection time, TLS negotiation time, Time to First Byte (TTFB), and Time to Last Byte (TTLB) at each step. The web test experience score calculates based on full journey TTLB rather than a single-hop TTFB, providing a comprehensive view of the entire redirect path.

These metrics are displayed across user, application domain, remote site, and Prisma Access location views. These per-hop insights allow you to quickly isolate bottlenecks for SaaS applications.

To distinguish between full Autonomous DEM® (ADEM) monitoring licenses and tenant-wide Data Loss Prevention (DLP) agent deployments, ADEM now provides granular entitlement tracking on the Access Experience Management page. Previously, there was no view for differentiating ADEM subscribers from DLP-only coaching users or indicating when user registrations were declined after exceeding portal license caps.

The updated view categorizes agent entitlement status across ADEM and DLP subscriptions, surfacing users who receive full diagnostic capabilities alongside those deployed strictly for End User Coaching (EUC). Overage metrics highlight users who exceed configured portal caps and are marked as Not Licensed, preventing inflated user counts and eliminating ambiguity when agent registrations are declined. This consolidated view provides clear visibility into registration status and license coverage across your deployment.