Learn how to verify the standard VPN/ Prisma Access endpoints in Prisma SD-WAN. With the native integration of Prisma SD-WAN
with Prisma Access, Standard Endpoints for all Prisma Access regions will be created
automatically.
Where Can I Use This?
What Do I Need?
Strata Cloud Manager
Prisma SD-WAN
Prisma SD-WAN license
Prisma SD-WAN AppFabric deployed at
one or more locations.
Physical and/or virtual ION devices running software
versions 5.6.X or higher.
Prisma Access Cloud Managed
Prisma Access with Aggregate Bandwidth; the
bandwidth licensing mode must be enabled per compute
location on the Prisma Access Cloud Managed portal.
Identification of the IPSec Termination Nodes within Prisma Access for connectivity.
Ensure that you have Prisma Access (Cloud Managed) and Prisma SD-WAN in the same TSG.
With the native integration of Prisma SD-WAN with Prisma Access, Standard Endpoints for all Prisma Access regions will be created
automatically. In addition, each of the endpoints will be configured with a liveliness
probe to the Prisma Access Firewall monitor address. The monitor will run an ICMP
check every ten (10) seconds and mark the tunnel as failed after three (3) consecutive
failures. The only action required will be to add these Endpoints to Groups and Domains.
On the Endpoints screen, select Standard VPN
from the drop-down.
By default, the check box is selected for endpoints created
through Easy Onboarding. This check box informs the Site
Configuration and Overlay Connections page on
the Prisma SD-WAN web interface that VPNs with this endpoint connect
to Prisma Access.
The Prisma Access check
box for an endpoint informs the Site Configuration and
Overlay Connections page on the Prisma SD-WAN web
interface that VPNs with this endpoint connect to Prisma Access. The
Prisma Access check box is automatically selected for
endpoints created through the new Easy Onboarding workflow. For manually created
endpoints, ensure to select the check box for Prisma Access.
View and Monitor Tunnels to Prisma Access
You can view the available Prisma Access tunnels for a site by
selecting the site and then clicking Configuration. View the number of Prisma
Access tunnels in the Connectivity section.
On the Configuration page, click Prisma Access to view the
connected Prisma Access endpoints. You can view the connected endpoints by selecting
a site, clicking Overlay Connections and then selecting the
overlay connection from the drop-down.