Manage Explicit Proxy Mobile Users
Table of Contents
Expand all | Collapse all
Manage Explicit Proxy Mobile Users
Manage Explicit Proxy Mobile Users and monitor their health and connections using
Prisma Access
. For users to connect to
Prisma Access
using Explicit Proxy, you no longer need to divide your
mobile users license between the users you want to secure with GlobalProtect and the
users you want to secure with an Explicit Proxy. Explicit Proxy uses your existing
Mobile User license.When you purchase a Mobile User license, by default
you can enable Explicit Proxy in addition to or instead of GlobalProtect.
To enable Explicit Proxy, refer to the following sections:
View the Health of Your Explicit Proxy Mobile Users
The
Monitoring Summary
tab gives you an overview of the health status of
all the Mobile Users logged into Prisma Access
. Connected Users
Connected Users
shows the number of users connected to Prisma Access
in the Time Range
selected. Hover over a point in the
chart to see the number of users at a specific time.License Consumption
Consumption Status
shows the number of users who have logged in to Prisma Access
at least once in the past 90 days using Explicit Proxy. The
usage is expressed against the total procured mobile user licenses as opposed to
separating a pool of Explicit Proxy licenses from the total mobile user
licenses.Top 5 Open Alerts by Severity
By default, only the nodes with the top five most severe
alerts during the
Time Range
selected appear.
The vertical lines represent the severity of the alerts. Drilling
down into an alert gives you more context of the underlying issue.
These alerts cannot be cleared manually. They can be cleared only by
resolving the underlying issue. View All Mobile User Alerts
link
takes you to the Alerts
page, where you can
filter the data displayed by Status
and Use Case
.When you drill down into an alert, the
Alert Details
page opens. This page
displays the status and description of the alert along with other information,
such as the Alert Generation Timestamp, alert status as to whether the alert is
open, the alert type, Prisma Access
location from where the alert was
generated, and the name of the tenant that was affected. Select the name of the
tenant to open the Prisma Access
Location page for the tenant, which shows
you the detailed tenant status.Top 5 Most Active Prisma Access Locations for Mobile Users
Prisma Access
Locations for Mobile UsersUse this bar graph to view the most active
Prisma Access
locations based on the number of
connected users at that time. It shows you the top five sites based on users
connected to a particular Prisma Access
location. Hover over a bar to see
the details of the number of Mobile Users that were logged in by region in the
specified Time Range
. Map View of Mobile Users Connected to Prisma Access
Prisma Access
The tab shows all the Mobile Users gateway locations and their status on
a map. The inverted triangles on the map are color-coded to indicate
Mobile Users
Map View
Prisma Access
location status:- Green: If any one instance is up, the MU location is connected, or up.
- Red: If all instances are down, the MU connection is disconnected, or down
- Gray: If instance states are a mixture of disconnected and unknown, the MU location is unknown.
The
Login Timeline
is based on the Time Range
that
you have selected and shows intervals within that time range. The
user data that you see on the map (inverted triangle markers) is
the data for the selected time slice within the Login
Timeline
. A time slice varies depending upon what you
select in the Time Range
filter. For example,
if you selected Last 7 Days
your time slice could
be one day or if you select the Last 15 minutes
,
your time slice will be one minute. By default, the user data is
set to show the last time slice on the Login Timeline
.
So, by default all the markers on the map will reflect the data
for the selected time slice. To see the data for a different day, click one of the vertical lines in the
Login
Timeline
. The color of the markers on the map represents the current
status of the location. Use the legend in the widget to decipher the status based on
the color. Hover on a location to see the name of the location and the number of
unique user connections for the location. Selecting a location icon shows the flight
path from where the mobile user is connecting to the gateway. The flight path also
shows where your users are connected from, if they are connecting from long range or
short range. Long-range connections are connections that are connecting from 500
miles or more from the Prisma Access
Locations.Monitor Connected Mobile Users
The
Mobile Users List
tab provides
data on your users connected during the Time Range
selected. Unique Mobile Users
This widget displays the number of new unique Mobile
Users who have logged in at least once during the
Time
Range
out of the aggregate of all the users logged in.Unique Mobile Users Connected Over Time
The trend line in this widget shows how many unique
users logged in during the specified
Time Range
.Number of Unique Mobile User Connections
This table displays all the unique connections within
the specified time range and can also be filtered based on the data
point that you select on the unique login. The table is filtered
based on a data point that you select in
Unique User
Logins Over Time
. When you select a user ID in the table,
you get the details on the user’s connection.The
Connect Method
column shows you whether the user is connected to Prisma Access
using GlobalProtect or explicit proxy. The columns displayed
in the table will vary based on which Connect Method
you
have selected. For instance, if you selected
GlobalProtect
, you see the OS
Family/Version
and the GP Client Version
columns but if you select Explicit Proxy
, then these
columns do not show. Instead, you see the Browser
column
that is applicable to explicit proxy. If you select both, then you see only
columns that are applicable to both.You can search for a specific Mobile User by entering the username
in the
Search All Mobile Users
column. This
opens the Mobile User details page for the user. Both GlobalProtect
and Explicit
Proxy
will be selected in the Connect Method
by
default to ensure that all users are searched.Mobile User Details
If you select a specific
Mobile
User ID
in the (Number of) Unique Mobile
Users Connections
table, the data on this page will
be filtered by default based on the Connect Method
option
that you had selected in the Mobile Users List
tab.
You’ll see the Browser
column that applies to Explicit
Proxy
.