Configure the App Log Collection Settings on the GlobalProtect Portal

1. Enable the GlobalProtect app log collection for troubleshooting on the GlobalProtect portal.

   1. In Panorama, select NetworkGlobalProtectPortalsGlobalProtect_PortalAgent DEFAULTAppEnable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting.
   2. Set Enable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting to Yes to enable the GlobalProtect app to display the Report an Issue option on the GlobalProtect app to allow end users to send the troubleshooting and diagnostic logs directly to Strata Logging Service. You must configure the Strata Logging Service certificate that is pushed from the portal as a client certificate to display the Report an Issue option. This certificate is used for the client to authenticate to Strata Logging Service when sending the logs. When this setting is set to No (default), the GlobalProtect app will not display the Report an Issue option and end users cannot send the troubleshooting and diagnostic logs to Strata Logging Service.

2. Configure the HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names on the GlobalProtect portal. Later, these HTTPS-based destination URLs are used to initiate performance tests for probing.

   1. In Panorama, select NetworkGlobalProtectPortalsGlobalProtect_PortalAgent DEFAULTAppRun Diagnostics Tests for These Destination Web Servers.
   2. Specify up to ten HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names (for example, https://10.10.10.10/resource.html, https://webserver/file.pdf, or https://google.com) to Run Diagnostics Tests for These Destination Web Servers on the GlobalProtect portal. To help you accurately identify download speed results, you can specify a download file location that has the relevant size. For example, the size of the file can range from 10 MB to 50 MB to calculate the sufficient download speed. However, this calculation is not true for the size limitation of the web page to fetch and download the file that can take less than a second, which is not a sufficient sample size to determine strong download speed results. This field is empty by default.

      The HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names that you provide are used only when Enable Autonomous DEM and GlobalProtect App Log Collection for Troubleshooting is set to Yes and when diagnostics are performed. These HTTPS-based destination URLs are not used when the GlobalProtect app creates troubleshooting reports when encountering an issue. Use commas, semi-colons, or separate lines to separate multiple fully qualified domain names (for example, google.com, gmail.com).