ION devices can connect to the controller for various services such as MRL service,
statistics, flows, logs, and remote access of device toolkit.
| Where Can I Use
This? | What Do I
Need? |
- Prisma SD-WAN (Managed by Strata Cloud Manager)
|
|
Prisma SD-WAN ION devices initiate multiple
connections to the controller for various services such as Message
Routing Layer (MRL) service, statistics, flows, logs, and remote
access of device toolkit. For services connecting to the controller
using random paths or interfaces, you can exclude certain interfaces
or paths from being used for these services. For example, an expensive
metered LTE circuit is used as a last resort interface to maintain
connectivity to the controller.
In addition, ION devices
generate application reachability probes when an application or
prefix is unreachable for a particular path. However, if a particular
circuit is to be used as a path of last resort only, then the amount
of non end-user traffic going over that specific circuit should
be minimized. You can exclude certain circuits and circuit categories
from being used for device initiated connections by using the
Use for controller
connections and
Use for application
probes options.
You can prioritize ION device interfaces
use for device initiated connections in the order of first controller
port interface, LAN port, any interface which does not have a label
attached, but has an IP address, and then interfaces with circuit
labels attached. The order of preference is based on the cost of
a circuit. A circuit with a higher cost has a lower preference for
device to controller connections.