Focus

Prisma SD-WAN

Check Tunnel Status

Table of Contents

Filter

Expand All | Collapse All

Check tunnel status on Prisma Access for both the Panorama managed and Cloud managed CloudBlades.

Where Can I Use This?	What Do I Need?
Prisma Access CloudBlade (Panorama Managed). Prisma Access CloudBlade (Cloud Managed).	Prisma SD-WAN License. Prisma Access for Networks Subscription. Supported Cloud Plugin Versions. Prisma Access CloudBlade (Cloud Managed) version 3.x.x. Prisma Access CloudBlade (Panorama Managed) version 3.x.x and later.

Check the tunnel status on Prisma Access for Panorama Managed and Cloud Managed CloudBlades.

Check Tunnel Status (Panorama Managed CloudBlade)

Check the tunnel status of the Panorama managed CloudBlade).

Verify the status of all tunnels via Cloud Service pluginStatusMonitorRemote Networks.

For more details check the logs for IPsec and IKE negotiation messages under MonitorSystem with the filter (subtype eq vpn) applied.

Integration requirements are listed for Prisma SD-WAN CloudBlade for Prisma Access (Cloud Managed).

To integrate Prisma SD-WAN and Prisma Access, refer to the following requirements for Prisma Access for Networks (Cloud Managed).

Product	Requirements for (Cloud Managed)
Prisma SD-WAN	Active Prisma SD-WAN subscription. Prisma SD-WAN AppFabric deployed at one or more locations. Physical and/or virtual ION devices running: Recommended version is 5.4.3 or higher. Minimum version supported is 5.1.9.
Prisma Access	Prisma Access for Networks 2.1.2 or later Aggregate Bandwidth; the bandwidth licensing mode must be enabled per compute location on the Prisma Access Cloud Managed portal. Identification of the IPSec Termination Nodes within Prisma identified for connectivity. When a new license is purchased which has both Prisma Access and Prisma SD-WAN for a specific tenant, a TSG ID is generated automatically as part of the license. The Prisma Access CloudBlade integrates the Prisma SD-WAN tenant with the Prisma Access tenant under the same TSG ID. Existing integrations with manual linking via the Hub version 1.0 do not require any additional configurations as the CloudBlade is backward compatible. Prisma Access versions earlier than 2.1.2 must contact the Palo Alto support team for mapping the integration.

Product

Requirements for (Cloud Managed)

Prisma SD-WAN

Active Prisma SD-WAN subscription.
Prisma SD-WAN AppFabric deployed at one or more locations.
Physical and/or virtual ION devices running:
- Recommended version is 5.4.3 or higher.
- Minimum version supported is 5.1.9.

Prisma Access

Prisma Access for Networks 2.1.2 or later Aggregate Bandwidth; the bandwidth licensing mode must be enabled per compute location on the Prisma Access Cloud Managed portal.
Identification of the IPSec Termination Nodes within Prisma identified for connectivity.
When a new license is purchased which has both Prisma Access and Prisma SD-WAN for a specific tenant, a TSG ID is generated automatically as part of the license. The Prisma Access CloudBlade integrates the Prisma SD-WAN tenant with the Prisma Access tenant under the same TSG ID.

Existing integrations with manual linking via the Hub version 1.0 do not require any additional configurations as the CloudBlade is backward compatible. Prisma Access versions earlier than 2.1.2 must contact the Palo Alto support team for mapping the integration.