Deploy Universal Agent to Monitor SD-WAN
Focus
Focus
Autonomous DEM

Deploy Universal Agent to Monitor SD-WAN

Table of Contents

Deploy Universal Agent to Monitor SD-WAN

ADEM Universal Agent provides a unified digital experience monitoring solution for all branch offices, including non-Palo Alto Networks® SD-WAN solutions.
Where Can I Use This?What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • ADEM or Strata Cloud Manager Pro license
  • Prisma Access license
  • Access to the Palo Alto Networks® image store
  • Access to Palo Alto Networks® image repository
  • Recommended host hardware specifications- 2 virtual CPUs, 1GB RAM, 2GB storage after installation
The Autonomous Digital Experience Management (ADEM) provides an Universal Agent to provide a unified digital experience monitoring solution for all branch offices, including non-Palo Alto Networks® SD-WAN solutions. ADEM Universal Agent is installed as a container or on Virtual Machines (VMs) for maximum adaptability. This agent removes hardware dependency for greater deployment flexibility. It installs seamlessly, including behind SD-WAN devices. This allows the agent to run synthetic tests from branch offices and provide consistent performance data across any network topology.
ADEM Universal Agent ensures uniform performance views for networks and applications in all scenarios. It supports diverse customer infrastructures and reduces architectural constraints. Through Strata™ Cloud Manager, it offers a secure, efficient process to deploy and manage agents with strong security and seamless lifecycle management for both single and bulk installations. This expanded coverage gives a complete view of the digital experience across the enterprise, including previously unmonitored branch locations.
Universal Agent Deployment as Container
ADEM supports container-based agent deployment that is packaged as a Docker image. Strata™ Cloud Manager generates a customized installation script with user-provided parameters. This script contains commands to pull the agent image from the Palo Alto Networks® image repository. You must copy-paste the script to the Linux shell to deploy the agent within your container management platform. Each installation package is tied to a specific tenant and that initial registration is secured with a custom key provided per tenant per installation. This process provides secure and automated deployment.
Universal Agent Deployment on Virtual Machines
The ADEM Universal Agent provides a hardware-agnostic monitoring solution that allows you to deploy digital experience sensors on standard virtual infrastructure, extending visibility beyond dedicated hardware appliances. This deployment uses a pre-packaged base VM image combined with a custom bootstrap ISO, which contains your specific network and security configurations. By simply attaching the ISO to the VM during setup, the agent automatically configures itself, offering a flexible and automated way to monitor performance across any hypervisor environment.
Deployment Prerequisites and Considerations
  • During registration, agents must be configured to communicate to the cloud portal via Prisma Access and not through a split tunnel configuration.
  • Ensure ADEM Portal FQDNs are routed through the Prisma Access Tunnel.
  • Use a granular policy that allows ADEM Universal Agent data subnet to reach the Prisma Access public IPs via Direct Internet Access.
  • It is recommended to have a dedicated Network Interface Card for management interface for easier troubleshooting.
  • It is recommended to enable tunnel monitoring for Remote Networks in Strata™ Cloud Manager.