Configure Probes
Table of Contents
Configure Probes
Probes measure key performance metrics to specific endpoints, aiding in path
selection and determining Layer 3 Circuit Reachability.
Prisma SD-WAN supports always-on probing, enabling measurement of key metrics such
as round-trip latency, packet loss, jitter, and other metrics to any ICMP/DNS/HTTP/HTTPS
service across all transports (Direct, Fabric, Standard VPN). These results are
available to the administrator and serve in making path selection decisions with precise
control using performance policy. Furthermore, the system can utilize the same
application health probes to determine Layer 3 Reachability. At the tenant level, you
can configure probes by specifying the probe type, endpoints, and frequency.
Probe Profiles
, which are global objects containing
probe configurations, are defined at the tenant level and linked to Circuit Categories and Circuits. Probe
Configs
are created with parameters such as Protocol Type (ICMP,
DNS, HTTP, HTTPS), EndPoints (IP/FQDN/URL), Frequency, Probe Cycle Duration, and
Path Type (Direct, Standard VPNs, Prisma SD-WAN VPNs). - To configureProbe Profiles, go to .View the list of configured probe profiles and their configurations. Use theActionsoptions toEdita probe profile, view theAudit Logs, or any system configuration changes and remove a probe profile. To add a newProbe Profile:
- SelectAdd New Probe Profileand enter aNamefor the profile and optionally,DescriptionandTags.
- From theProbe Configsdrop down, select a probe profile. You can select up to eight probe configs for a probe profile. The default probe configuration are:
- Saveyour changes.
The system automatically applies default probe profiles to all circuit categories, while default probe configurations are disabled by default for existing tenants. You can't remove a default probe profile, but you have the option to delete a default probe configuration. - To configureProbe Configs, go to .
View the list of configured probe configurations and their details. Use theActionsoptions toEdita probe config, view theAudit Logsor any system configuration changes. To add a newProbe Config:- SelectAdd New Probe Config. For existing tenants, the default Probe Configs will be present in Disabled mode. However, for new tenants, they will be in Enabled mode by default.
- Enter aNamefor the probe config and optionally,DescriptionandTags.
- Enter anIP addressorFQDNfor the probe configuration.
- Select theProbe Cycle Durationto be in minutes or seconds.
- Enter theProbe Countvalue as a multiple of the probe cycle duration; multiples of 1, 2, and 3 are accepted.
- Select theProbe Path Typeas Direct, Prisma SD-WAN VPN, and Direct VPN.
- Select the Protocol as,
- HTTP: Enter theHTTP Response Codefrom the drop-down and theHTTP Response String.
- HTTPS: Enter theHTTPS Response Codefrom the drop-down and theHTTPS Response String.
- DNS: Enter theDNS Server IP address.The IP / FQDN address will be used as the PTR / DNS record lookup criteria.
- ICMP
- Saveyour changes.