Focus

Prisma SD-WAN

Enable Autonomous DEM in Prisma Access (Panorama Managed CloudBlade)

Table of Contents

Filter

Expand All | Collapse All

Activation & Onboarding
Administration
CloudBlades
Select a Document
- CloudBlade Integrations
- CloudBlades Integration with Prisma Access
Deployment
Incidents & Alerts
Reference
Release Notes
Select a Document
- 6.5
- 6.4
- 6.3
- 6.1
- 5.6
- Prisma SD-WAN Controller
- Prisma SD-WAN On-Premises Controller
- Prisma SD-WAN CloudBlades
- Prisma Access CloudBlade Cloud Managed
- Prisma Access CloudBlade Panorama Managed
Prisma SASE

Enable Autonomous DEM in Prisma Access (Panorama Managed CloudBlade) and refer to the ADEM considerations.

Open Panorama.
In the left panel, expand Cloud Services and click Configuration.
Click the Remote Networks tab.
Click the gear icon on the top right corner of the Aggregate Bandwidth and Autonomous DEM Settings card to open the Bandwidth Allocation dialog.
Select the Enable check box next to the compute location to allocate the bandwidth for its Remote Networks.

The Autonomous DEM Allocation column will be visible only if you have purchased the ADEM for Remote Networks license.
Click OK.
Add the following URLs to make the SD-WAN site register to the ADEM portal:
1. In Panorama, go to Objectaddresses. Click on Add and add the following ADEM Service Destination FQDNs.
  - agents.dem.prismaaccess.com
  - agents.jp1.ap-northeast-1.dem.prismaaccess.com
  - agents.sg1.ap-southeast-1.dem.prismaaccess.com
  - agents.au1.ap-southeast-2.dem.prismaaccess.com
  - agents.ca1.ca-central-1.dem.prismaaccess.com
  - agents.eu1.eu-central-1.dem.prismaaccess.com
  - agents.uk1.eu-west-2.dem.prismaaccess.com
  - agents.us1.us-east-2.dem.prismaaccess.com
  - updates.dem.prismaaccess.com
  - agents.in1.ap-south-1.dem.prismaaccess.com
2. Create an address group to contain the addresses above by going toObjectAddress Groups, clicking Add and providing a name for the address group.
3. Add the address group you just created into the security policy. Go to PoliciesSecurityPreRules. Click Add and add the address group to the policy.

ADEM Considerations

The following are the prerequisites to enable ADEM for Prisma SD-WAN Remote Networks.

ADEM is only supported when Aggregate Bandwidth is enabled on Prisma Access.
When using ADEM on Prisma Access for Networks (Panorama Managed), you can only manage ADEM from the Cloud Management console.
You must allocate Remote Networks bandwidth on the compute locations in Prisma Access.