View and Monitor Service Connections
Focus
Focus
Prisma Access

View and Monitor Service Connections

Table of Contents

View and Monitor Service Connections

View and monitor aggregated service connections data as well as information about individual service connections. Service connections enable both mobile users and remote networks.
Where can I use this?What do I need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
View aggregated service connections data as well as information about individual service connections. Service connections enable both mobile users and remote networks. Beyond providing access to corporate resources, service connections allow your mobile users to reach branch locations. You can view your service connections in Strata Cloud Manager to see service connection status, bandwidth consumption trends, tunnel data and trends, and information about overall service connection health. Select MonitorData CentersService Connections to get started.

Service Connections by Status

You can view the health status of all your service connections. The color-coded chart shows you a distribution of how many service connections are up, down, or need attention. You can view a synopsis of the bandwidth your service connections consumed in the last 30 days.
Bandwidth Consumption shows the highest peak bandwidth consumed by a site across all sites for the per-site bandwidth allocation model. The peak values are computed for the selected time filter duration.

Bandwidth Consumption Trend

View Bandwidth Consumption Trend per Service Connection. The trend shows the bandwidth consumption by each of your service connections, as well as their average and peak utilizations.
  • The default view shows Cumulative (Ingress + Egress) bandwidth consumption. Other options are Ingress, Egress, or Ingress vs. Egress.
  • View the Peak, Median, or Average bandwidth consumption trend during the selected time range. The default setting is Peak bandwidth consumption.
  • Log Scale or Linear Scale.
  • Select 1 to 10 Service Connections to view their trend lines on the graph during the selected time range. Hover over the graph to information about each of the service connections you selected.

Service Connections Table

The Service Connections table shows you data about your service connections, such as the status, the remote IP address, BGP status, current tunnel status, and other data. Select a Service Connection Name for details about that service connection.
  • Service Connection Name—The service connection's unique name.
  • Site StatusUp, Down, Warning, or Unknown.
  • Transport Type—IPSec.
  • Remote IP—The remote IP address.
  • BGP Status—Whether the site BGP status is Up, Down, or Unknown.
  • Tunnels Status—The number of the site's tunnels and how many of those tunnels are up.
  • Tunnel BGP Status—The BGP status for each tunnel.
  • Service Connection Endpoint IP—The service connection's endpoint IP address.
  • Service Status—This field indicates the status of the instance or firewall to which the site is connected. The status can be Up, Down, or Unknown.
  • Prisma Access Location—The service connection's Prisma Access location.
  • Average Bandwidth Consumption—Average bandwidth consumption in Kbps.
  • Peak Bandwidth Consumption—Peak bandwidth consumption in Kbps.

Service Connection Details

Select any Service Connection Name to view its details. View its Service Connection Status, Bandwidth Consumed during the last 30 days. Bandwidth Consumption Trend shows bandwidth consumption by each of your service connections during the selected time range.
Baseline computation requires you to have the ADEM-AIOps license.
  • Inside Baseline—When the values shown in the graph are within the baseline, the values for that period appear in blue.
  • Outside Baseline—When the values in the trend line shown in the graph deviate from the baseline's upper or lower limits, the trend line for that period appears in red.
  • Baseline—Baseline data is calculated in 1-hour bin sizes and takes into consideration the last 28 days of data from those hour-long bins for a particular tunnel.
  • No Data—No data available for the time period shown.

Route Table Visibility

To help you address reachability challenges, we offer visibility into the route table at each service connection. You can perform a route table search for a destination IP address to determine whether there is a route available to reach the desired destination. With this information, you can receive guidance from your Prisma Access infrastructure to investigate other potential causes of failure. This knowledge allows you to focus your efforts on resolving any issues affecting reachability.
Select View Routing Table to see this branch's Routing Table, which has IP routes for destinations available at the branch from Prisma Access.
  • Use the search bar to select the destination or look up the route.
  • Use the drop-down to filter by Flag.
The routing table shows:
  • #—Route number
  • Destination—IP address and subnet of the reachable network.
  • Next Hop—IP address of gateway at the next hop toward the destination network. A next hop of 0.0.0.0 indicates the default route.
  • Metric—Metric for the route determined by the routing protocol.
  • Flag—Information for this route, as follows:
    • A B—Active and learned from BGP.
    • A C—Active and connected. Destination—network.
    • A H—Active and connected. Destination—host only.
    • A R—Active and learned from RIP.
    • O1—OSPF external type-1.
    • O2—OSPF external type-2.
    • Oi—OSPF intra-area.
    • Oo—OSPF interarea.
    • S—Inactive and static.
    • A S—Active and static.

Tunnels

See how many Tunnels there are for this service connection, and view each tunnel's details. To download Tunnels data, select the Download icon.

Tunnel Trends

You can select a number of tunnels and view their median Round-Trip Time. If you don’t specify a set of tunnels, the median RTT is computed for the 10 tunnels with the highest observed RTT.
Aggregated Tunnel Connectivity shows you the total number of connected tunnels for the selected time range. Hover over either graph to see the number of connections at a specific time.
Commits Pushed shows how many commits have been pushed during the selected Time Range and when the Last Push Commit occurred.

Site Status

Site Status shows site availability during the time range selected. Green means the site was up during this time, red means the site was down, and gray means no data was available during the time shown.

Health

Health shows you the Site Status, and it shows the name and status of each tunnel in the site.

Connectivity

Connectivity shows the Prisma Access location the site is connected to, its source and destination IPs, and the Prisma Access node status.

Consumption

Consumption shows bandwidth consumption details.