Correlate Objects between Prisma SD-WAN and Prisma Access
Focus
Focus
Prisma SD-WAN

Correlate Objects between Prisma SD-WAN and Prisma Access

Table of Contents
Helps correlate objects between Prisma SD-WAN and Prisma Access for troubleshooting purposes.
Where Can I Use This?What Do I Need?
Supported CloudBlades:
  • Prisma Access for Networks (Managed by Panorama)
  • Prisma Access for Networks (Cloud Managed)
  • Prisma SD-WAN license
  • Prisma Access license
  • Supported Cloud Plugin Versions
  • Prisma Access for Networks (Managed by Panorama) CloudBlade versions 3.x.x and later
  • Prisma Access for Networks (Cloud Managed) CloudBlade versions 3.x.x and 4.x.x
To simplify troubleshooting, VPNs that are automatically created for Prisma Access Integration contain extended information inside the VPN interface description. These can be viewed from Configure the deviceInterface Config.
Description of the configuration:
Prisma Access info: Remote Onboarding (Cloud Managed)
ECMP Onboarding (Panorama Managed)
IPSEC Tunnel
IKE Gateway
Prisma Licenses: Aggregate (Panorama Managed)
Go to the status Monitor, browse to the Site and Tunnel Summary tabs for more information and use sites name tags for easier identification. Any resource tagged AUTO-PRISMA_MANAGED is written by the CloudBlade and must not be edited. Only Route Maps for BGP Peers is allowed to be edited.

View Standard VPNs at a Site Level

To view Standard VPNs at a site level:
  1. In Strata Cloud Manager, go to MonitorBranch SitesPrisma SD-WAN. From the Map view, hover over a site to view the site connectivity and Incidents information.
  2. Click the site icon and select theOverlay Connections tab.
    The Branch - Standard VPN screen will display.
  3. Click the region name on the Connected Standard VPN Endpoints to view additional details on the interfaces that are a part of the Standard VPN.
    Within the Branch - Standard VPN expansion view, you can view all the interfaces that establish the VPN.
    If a Standard VPN tunnel interface is down, an alarm will be raised similar to any other interface within the system.