Configure the App Log Collection Settings on the GlobalProtect Portal

Enable the GlobalProtect app log collection for troubleshooting on the GlobalProtect portal.

In Panorama, select

Network

GlobalProtect

Portals

GlobalProtect_Portal

Agent

DEFAULT

App

Enable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting

.

Set

Enable Autonomous DEM and GlobalProtect Log Collection for Troubleshooting

to

Yes

to enable the GlobalProtect app to display the

Report an Issue

option on the GlobalProtect app to allow end users to send the troubleshooting and diagnostic logs directly to Cortex Data Lake. You must configure the Cortex Data Lake certificate that is pushed from the portal as a client certificate to display the

Report an Issue

option. This certificate is used for the client to authenticate to Cortex Data Lake when sending the logs. When this setting is set to

No

(default), the GlobalProtect app will not display the

Report an Issue

option and end users cannot send the troubleshooting and diagnostic logs to Cortex Data Lake.



Configure the HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names on the GlobalProtect portal. Later, these HTTPS-based destination URLs are used to initiate performance tests for probing.

In Panorama, select

Network

GlobalProtect

Portals

GlobalProtect_Portal

Agent

DEFAULT

App

Run Diagnostics Tests for These Destination Web Servers

.

Specify up to ten HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names (for example, https://10.10.10.10/resource.html, https://webserver/file.pdf, or https://google.com) to

Run Diagnostics Tests for These Destination Web Servers

on the GlobalProtect portal. To help you accurately identify download speed results, you can specify a download file location that has the relevant size. For example, the size of the file can range from 10 MB to 50 MB to calculate the sufficient download speed. However, this calculation is not true for the size limitation of the web page to fetch and download the file that can take less than a second, which is not a sufficient sample size to determine strong download speed results. This field is empty by default.

The HTTPS-based destination URLs that can contain IP addresses or fully qualified domain names that you provide are used only when

Enable Autonomous DEM and GlobalProtect App Log Collection for Troubleshooting

is set to

Yes

and when diagnostics are performed. These HTTPS-based destination URLs are not used when the GlobalProtect app creates troubleshooting reports when encountering an issue. Use commas, semi-colons, or separate lines to separate multiple fully qualified domain names (for example, google.com, gmail.com).