Monitor SaaS Applications Using SD-WAN

SD-WAN SaaS monitoring enables you to monitor and maintain healthy connections to your critical SaaS applications at branch locations. Configure SaaS Quality profiles and associate them with SD-WAN policy rules that monitor the key health metrics such as latency, jitter, and packet loss for your essential SaaS applications. By creating a SaaS Quality profile, you can specify how your SD-WAN solution monitors and manages traffic to specific SaaS applications, ensuring optimal path selection based on real-time network conditions. It allows you to define monitoring parameters for up to four static IP addresses, or one FQDN, or URL per profile.

Configure a SaaS Quality profile to monitor direct internet access (DIA) links between a SaaS application and your branch firewall. The SaaS Quality Profile (SQP) is used to measure the path health of Direct Internet Access (DIA) applications and can use either an active or passive approach. The active method is a one-sided health measurement that sends a probe from the firewall and it measures bi-directional health to a static IP address or a monitored URL. The passive method doesn’t send any probes. SaaS applications will not have a destination side PAN-OS firewall frontending the traffic, so the SD-WAN VPN tunnel health probes are not used with these monitoring types.

With direct internet access (DIA) links, you can ensure application usability and swap links when performance thresholds are exceeded that provides reliability on business-critical SaaS applications at branch firewall locations. With SD-WAN SaaS monitoring, you can proactively manage link health, automatically switch to better-performing links for new sessions, and maintain optimal application performance. This granular control over SaaS traffic routing enhances your ability to deliver consistent, high-quality user experiences across your distributed network.