Mobile Users Dashboard
In Prisma Access, Mobile Users essentially refers to
the devices used by the mobile users that connect to the GlobalProtect
gateways.
Securing mobile users from threats is often a complex
mix of security and IT infrastructure procurement and setup, bandwidth
and uptime requirements in multiple locations throughout the world,
while staying within budget. With Prisma Access for users, the entire
infrastructure is deployed for you and scales based on the number
of active users and their locations. For more information about mobile
users in cloud-managed Prisma Access, see Mobile Users in Prisma Access (Cloud Management)
Use the tab
to view data related to your mobile users using GlobalProtect, explicit
proxy or both, such as Mobile Users Open Alerts, Prisma Access Location
Status, and user Login Count of Mobile Users. The data displayed
throughout the
Mobile Users
tab is based
on the Time Range
you select with the exception
of the Mobile User License Consumption widget, which always displays
data based on the number of unique users logged in the last 90 days
relative to all licensed users. A unique user is a user with a unique
username who has logged in to Prisma Access at least once in a given
period specified by Time Range
. Searching for a Specific Mobile User
To get the detailed data for a specific Mobile User,
enter the username in the
Search All Mobile Users
search
box. Be sure to enter the full user name. A tab opens with the user
details displayed.Mobile Users Monitoring Summary
The tab gives
you an overview of the health status of all the Mobile Users logged
into Prisma Access. This tab has the following widgets:
Connected Users
The
Connected Users
widget displays in real time
the number of users connected to Prisma Access at any specific time
during the selected Time Range
, as well as the trend of the
connected users over the time period. The data is filtered based
on your selection in the Connect Method
.You can see the general
trend of connected users over a specific period of time. When you
hover over different points on the trend line, you get the number of
users that were connected right at the timestamp shown. The datapoint
value changes based on the Time Range
selected. Toggle Peak
or Average
based
on the data you want to see by selecting it.
Mobile User License Consumption
View the statistics on the Mobile User license consumption
in this widget. You can see the total number of licenses purchased
by Mobile Users and within that the number of licenses that were
consumed by unique users that were connected to Prisma Access in
the last 90 days, because licenses are based on 90 days. A unique
user is a user with a unique username who has logged in to Prisma Access
at least once in the last 90 days.
If you select
GlobalProtect
under Connect Method
,
this widget displays data only for the number of licenses consumed
by unique users connected using GlobalProtect in the last 90 days
out of the total number of licenses allocated for users using GlobalProtect
to connect to Prisma Access. Likewise, if you select Explicit
Proxy
under Connect Method
, this
widget displays data only for the licenses consumed by unique users
connected through explicit proxy. If you select both (All
),
the widget displays the cumulative number of licenses consumed by
unique users connected using GlobalProtect as well as explicit proxy.
In this view, you can also see the split in the license consumption
for GlobalProtect only or explicit proxy only.In the image below, the bar at the bottom displays in percentage
the number of unique user licenses consumed (21) compared to the
total licenses (10,000).
Top 5 Open Alerts by Severity
By default, only the nodes with the top five most severe
alerts are displayed. The vertical lines represent the severity
of the alerts. Drilling down into an alert gives you more context
of the underlying issue. These alerts cannot be cleared manually.
They can be cleared only by resolving the underlying issue.
View
All Mobile User Alerts
link takes you to the Alerts
page,
where you can filter the data displayed by Status
and Use
Case
.When you drill down into an alert, the alert details page opens
in a tab. This page displays the status and description of the alert
along with other information, such as the Alert Generation Timestamp,
alert status as to whether the alert is open, the alert type, Prisma
Access location from where the alert was generated, and the name
of the tenant that was affected. Selecting the name of the tenant
opens the Prisma Access Location page for the tenant, which shows
you the detailed status for the tenant.
User Connections to Prisma Access Locations
The map in this widget shows unique user connections
(identified by username plus device ID) that logged in during the
specified
Time Range
. If you select a location,
it takes you to the Map View
for Mobile Users.
GlobalProtect Version Distribution
This widget is displayed only when you select GlobalProtect
under
Connect Method
. It shows you the GlobalProtect
version that your user connections are running on their machine.
Selecting a version opens the Mobile Users List
tab,
which drills down into the data on the mobile user connection that
is logged in. The trend line next to the version numbers is a graphic
representation of the distribution of the GlobalProtect app version.
This helps you track the adoption of new GlobalProtect versions
over time.The data displayed in this widget can be used to enforce compliance
with the latest GlobalProtect app version.
Top 5 Most Active Prisma Access Locations for Mobile Users
The data displayed in this histogram is filtered based
on your selection in the
Connect Method
.
If you chose either Explicit Proxy
or both Explicit
Proxy
and GlobalProtect
, you
see the chart for users connected through explicit proxy. Otherwise,
you see the GlobalProtect chart only.Use this bar graph to view the most active Mobile User Locations
based on the number of Connected Users at that time. It shows you
the top five sites based on users connected to a particular Prisma
Access location. Hover over a bar to see the details of the number
of Mobile Users that were logged in by region in the specified
Time
Range
.
IP Pools Reaching Maximum Capacity
This widget allows you to monitor the IP pools utilization.
The real-time bar graph shows the IP pool utilization by different
IP pool allocation theaters based on the number of connected users
at that time. The IP pool utilization percentage on the bar graph
is the number of IP pool blocks utilized out of all the IP pool
blocks that are available across all the subnets. You can take proactive
actions by adding subnets when you see an IP pool bar approaching
the maximum capacity for any region.
Mobile Users Map View
The tab shows all the
Mobile Users gateway locations and their status on a map.
The
Login Timeline
is based on the Time Range
that
you have selected and shows intervals within that time range. The
user data that you see on the map (inverted triangle markers) is
the data for the selected time slice within the Login
Timeline
. A time slice varies depending upon what you
select in the Time Range
filter. For example,
if you selected Last 7 Days
your time slice could
be one day or if you select the Last 15 minutes
,
your time slice will be one minute. By default, the user data is
set to show the last time slice on the Login Timeline
.
So, by default all the markers on the map will reflect the data
for the selected time slice. To see the data for a different day, click one of the vertical
lines in the
Login Timeline
. The color of
the markers on the map represents the current status of the location.
Use the legend in the widget to decipher the status based on the
color. Hover on a location to see the name of the location and the
number of unique user connections for the location. Selecting a
location icon shows the flight path from where the mobile user is
connecting to the gateway. The flight path also shows where your
users are connected from, if they are connecting from long range
or short range. Long-range connections are connections that are
connecting from 500 miles or more from the Prisma Access Locations.
When you select a location with GlobalProtect users, a side panel
opens showing you the details for the user.
Mobile Users List
The
Mobile Users List
tab provides
data on how many users and user connections connected over Time Range
period.
On this tab, you’ll find the following widgets:Unique Mobile User Connected Over Time
This widget displays the number of new unique Mobile
Users who have logged in at least once during the
Time
Range
out of the aggregate of all the users logged in.
Unique Mobile Users
The trend line in this widget shows how many unique
users logged in during the specified
Time Range
. 
Unique Mobile User Connections
This table displays all the unique connections within
the specified time range and can also be filtered based on the data
point that you select on the unique login. The table is filtered
based on a data point that you select in
Unique User
Logins Over Time
. When you select a user ID in the table,
you get the details on the user’s connection.The
Connect Method
column shows you whether
the user is connected to Prisma Access using GlobalProtect or explicit
proxy. The columns displayed in the table will vary based on which Connect Method
you
have selected. For instance, if you selected GlobalProtect
,
you see the OS Family/Version
and the GP
Client Version
columns but if you select Explicit
Proxy
, then these columns do not show. Instead, you
see the Browser
column that is applicable
to explicit proxy. If you select both, then you see only columns
that are applicable to both.
You can search for a specific Mobile User by entering the username
in the
Search All Mobile Users
column. This
opens the Mobile User details page for the user. Both GlobalProtect
and Explicit
Proxy
will be selected in the Connect Method
by
default to ensure that all users are searched.Mobile User Details
If you select a specific
Mobile
User ID
in the Unique Mobile Users Connections
table
in the Mobile Users List
tab, the data on
this page will be filtered by default based on the Connect
Method
option that you had selected in the Mobile
Users List
tab.The columns displayed in the
Mobile User Logins (per Device)
table
will vary based on which Connect Method
you
have selected. For instance, if you selected GlobalProtect
,
you see the OS Family/Version
and the GP
Client Version
columns but if you select Explicit
Proxy
, then these columns do not show. Instead, you
see the Browser
column that is applicable
to explicit proxy. If you select both, then you see only columns
that are applicable to both.If a user has logged in using both
GlobalProtect
and Explicit
Proxy
, by default the data in the widgets will be filtered
based on the Connect Method
that was selected
in the Mobile Users List
tab. You can select
a different option in the Connect Method
with
which to filter the displayed data. If you select both GlobalProtect
and Explicit Proxy
in Connect
Method
, the Mobile User Logins (per Device)
table
displays only the columns that are applicable to both. Any connect
method specific columns (GlobalProtect
or Explicit
Proxy
specific columns) will not be displayed.