Configure the App Log Collection Settings on the GlobalProtect Portal

You must enable the GlobalProtect app to display the
Report an Issue
option on the GlobalProtect app to allow end users to send the GlobalProtect app troubleshooting and diagnostic logs directly from their endpoint to the Cortex Data Lake instance that is associated with the Prisma Access deployment for further analysis.
  1. Enable the GlobalProtect app log collection for troubleshooting on the GlobalProtect portal.
    1. In Panorama, select
      Network
      GlobalProtect
      Portals
      GlobalProtect_Portal
      Agent
      DEFAULT
      App
      Enable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting
      .
    2. Set
      Enable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting
      to
      Yes
      to enable the GlobalProtect app to display the
      Report an Issue
      option on the GlobalProtect app to allow end users to send the troubleshooting and diagnostic logs directly to Cortex Data Lake. You must configure the Cortex Data Lake certificate that is pushed from the portal as a client certificate to display the
      Report an Issue
      option. This certificate is used for the client to authenticate to Cortex Data Lake when sending the logs. When this setting is set to
      No
      (default), the GlobalProtect app will not display the
      Report an Issue
      option and end users cannot send the troubleshooting and diagnostic logs to Cortex Data Lake.
  2. Configure the HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names on the GlobalProtect portal. Later, these HTTPS-based destination URLs are used to initiate performance tests for probing.
    1. In Panorama, select
      Network
      GlobalProtect
      Portals
      GlobalProtect_Portal
      Agent
      DEFAULT
      App
      Run Diagnostics Tests for These Destination Web Servers
      .
    2. Specify up to ten HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names (for example, https://10.10.10.10/resource.html, https://webserver/file.pdf, or https://google.com) to
      Run Diagnostics Tests for These Destination Web Servers
      on the GlobalProtect portal. To help you accurately identify download speed results, you can specify a download file location that has the relevant size. For example, the size of the file can range from 10 MB to 50 MB to calculate the sufficient download speed. However, this calculation is not true for the size limitation of the web page to fetch and download the file that can take less than a second, which is not a sufficient sample size to determine strong download speed results. This field is empty by default.
      The HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names that you provide are used only when
      Enable Autonomous DEM and GlobalProtect App Log Collection for Troubleshooting
      is set to
      Yes
      and when diagnostics are performed. These HTTPS-based destination URLs are not used when the GlobalProtect app creates troubleshooting reports when encountering an issue. Use commas, semi-colons, or separate lines to separate multiple fully qualified domain names (for example, google.com, gmail.com).

Recommended For You