Known Issues—Autonomous DEM
Focus
Focus
Autonomous DEM

Known Issues—Autonomous DEM

Table of Contents

Known Issues—Autonomous DEM

Review the open issues in Autonomous Digital Experience Management (ADEM).
Where Can I Use This?What Do I Need?
  • Prisma Access (Cloud Management)
  • Prisma Access (Panorama Managed)
  • Strata Cloud Manager
  • Prisma Access license
  • ADEM Observability
Here are the issues we’re currently working on.
IDDescription
AIOPS-6541
On the Monitor > Prisma Access Locations page, information in the CDL connectivity widget doesn’t match the information in the table.
AIOPS-6421
On the Incidents and Alerts Prisma AccessUpdate Profile page, the Save button is unavailable on the configuration page for the IAM Admin role. Therefore, any updates to the Notification profile by the IAM Admin role cannot be saved.
AIOPS-5934
On the SASE Health Dashboard, incidents are filtered by Compute Location instead of Prisma Access Location.
DEM-9034In DashboardsSASE Health, the number of users that appears next to a segment, such as LAN, does not match the number of users with degraded experience that you see after you select the user count.
DEM-8709If you're collecting both Real User Monitoring (RUM) and synthetic test data, you may experience up to a 40-minute delay before you see combined results in ADEM dashboards.
DEM-8366
Under DashboardsSASE HealthMonitored Applications, when Proxy alone is deployed in a particular Prisma Access Location, we do not observe that location and its details on the Monitored Applications map.
DEM-8217
The Strata Cloud Manager auto-generated PAC file contains an expression with a $ symbol. The ADEM agent is unable to process the $ symbol and provides inaccurate results on the ADEM portal.
Workaround: Enable the PAC File Upload check-box, upload the custom PAC file with the same configuration (but without the $ symbol), and save the configuration.
DEM-7548
The Apple macOS Sequoia 15+ version affects ADEM Agent installations as follows:
  • Fresh installations of ADEM Agents with version 5.4 and higher will be successfully installed on macOS 15 and higher.
  • Fresh installations of ADEM Agents with version 5.4 or lower on macOS 15+ will fail. Because current GlobalProtect versions bundle ADEM Agents with version 5.4 and lower, admins need to install the latest ADEM Agent version manually.
  • ADEM Agents already installed on earlier versions of macOS will upgrade successfully to the latest version and continue to function normally.
DEM-5154
When logged in as “ADEM Tier 1 Support” role, the SD-WAN tab is not visible on theMonitorBranch Sites page.
Workaround: Add the “View-only Administrator” role to the Prisma SD-WAN application to view the SD-WAN tab and the Branch Sites ADEM data under this tab.
DEM-4686
ADEM may not be able to identify every problem that may impact a user's calls. For example, WiFi disconnect will impact a Zoom meeting, but will also stop ADEM synthetic tests. As a result, the Number of minutes with issues field in the Overall Zoom Performance Impact widget and the Impacted Minutes field of the Zoom Poor Performance Root Cuases widget may not match.
DEM-4630On the User Details page and the Application Details page, the Historical Synthetics tab displays even if you have not selected the Zoom application.
DEM-4349
The Map View tab of the Prisma Access Locations page displays edge locations such as Hungary and Slovakia as part of the Israel compute location even though Israel is now a part of me-west-1 location.
DEM-4248
If the web tests are disabled for an application test, and the network performance probes for that test are failing, score for these tests will be displayed as null (grey tile) on the Prisma Access Locations page.
DEM-3992
The ADEM dashboard may list one or more user specific attributes for multiple clients. For example, the user location or the hostname may reflect the same value for multiple users. This happens if their Windows GUID is identical.
Make sure the Windows GUID is unique for all the machines. Then reinstall the agent to get the correct status updated.
DEM-3873
After the ADEM license expires, the Self-Serve feature will continue to work for a grace period of 30 days. At the end of the 30-day grace period, the notifications get disabled on both Macintosh and Windows. On Macintosh, if you click the Application Experience menu bar icon, the UI will open and notify you that the notifications are disabled. On Windows, the Application Experience icon in the task bar gets removed.
DEM-3798
Users receive the Self-Serve notifications regardless of whether they are online or offline. If and when a user's device gets disconnected from the ADEM portal (the device goes offline), users will continue to receive Self-Serve notifications on their device during the period that the device is offline. However, the notification count will not get updated on the ADEM portal.
DEM-3139
If a user belongs to multiple user groups, then The Mobile Users Group filter on the Applications page returns applications assigned to all groups that the user belongs to, not just the selected group in the filter.
DEM-3129
Custom apps that are deleted from Prisma Access continue to show in the Autonomous DEM portal.
DEM-3066
When ADEM is accessed from the Prisma Access App, only those security groups currently used in one or more security policies are displayed. On Panorama LDAP, all user groups are displayed.
DEM-2993When monitoring is enabled for a remote site, if the data is not received by the ADEM portal for that site, the site does not display in Monitored Remote Sites dashboard.
DEM-2834If you make a modification to the application test configuration, you may see data gaps of 5 mins interval on the application experience trend and performance metrics chart for the remote site.
DEM-2815
The application score that is displayed on the "Global Distribution of Application Experience Scores for Remote Sites" does not match the score on the Remote Sites page. The first score is an average score filtered by location. The second score (Remote Sites) is an average of the average score for each remote site.
DEM-2777
Any ADEM license changes for Remote Networks (For example, SPN bandwidth allocations) can take between 1 to 4 hours to reflect in the UI.
DEM-2717
When logging into ADEM as a Data Security Manager, the page fails to load displaying the following error:“Maximum update depth exceeded. This can happen when a component repeatedly calls setState inside componentWillUpdate or componentDidUpdate. React limits the number of nested updates to prevent infinite loops.”
DEM-2596
When you have 200K ADEM agents or more, the Settings page in ADEM fails to load. This is an intermittent issue and is typically observed when multiple users are trying to access the Summary page in parallel.
Workaround: Refresh the page or try re-logging into ADEM.
DEM-2477
After selecting Application filter, the Location Details page fails to load the performance trends and path visualization tabs data.
DEM-2048
When performing a new installation of GlobalProtect 5.2.10 or later on an M1 MacBook device that does not have Rosetta 2 installed, the Autonomous DEM agent does not get installed even though the message that GlobalProtect displays indicates that the agent installed successfully.
Workaround: Manually install Rosetta 2 on the M1 MacBook device and then refresh the GlobalProtect connection to enable GlobalProtect to re-initiate the install of the Autonomous DEM agent.
DEM-1457
On a Windows operating system running GlobalProtect version 5.2.8, if the endpoint is in a Trusted network with VPN tunnel established to the internal gateway, the ADEM portal displays the GlobalProtect status as Connected-Internal and VPN status as Disabled. The trend line shows a blue background indicating that the test was run while VPN was disabled.
DEM-253
For applications that are being split tunneled, the synthetic test does not perform a trace path to display a hop-by-hop detailed topology on the UserUser Details page for the specific application. The telemetry from the application and network performance tests are collected and available on Autonomous DEM.
DEM-198
Prisma Access LocationsTopology View does not visually identify the hop details.
DEM-191
Synthetic tests from Prisma Access location vantage points are performed on all Prisma Access locations within a given region, even if you have not deployed the infrastructure to that specific location. You may see additional locations on the Prisma Access Locations page.
DEM-183
When you install GlobalProtect app 5.2.6 on macOS devices, the pop-up prompt appears, prompting end users for administrative privileges to modify system settings.
Workaround: Select OK so that the pop-up prompt does not appear again.
DEM-105
Autonomous DEM does not run network performance tests to the service connection, and hence the network performance metrics are not measured for service connections. The service connection is included when tracing the network path from the endpoint to the application.
NETVIS-3095In Activity InsightsUsersAgent Users or Activity InsightsUsersPAB Users when you Add Filter, the data in the Access Agent Users table may not match that which is in the Monitored Users widget. For example, if the table shows a user device with poor experience, the widget may not reflect that in the count of user devices with poor experience.