Mobile Users

In Prisma Access, Mobile Users essentially refers to the devices used by the mobile users that connect to the GlobalProtect gateways.
Use the
Prisma Access
Insights
Mobile Users
tab to view data related to your mobile users- using GobalProtect, explicit proxy or both, such as Mobile Users Open Alerts, Prisma Access Location Status, and user Login Count of Mobile Users. The data displayed throughout the
Mobile Users
tab is based on the
Time Range
you select with the exception of the Mobile User License Consumption widget which always displays data based on the number of unique users logged in the last 90 days relative to all licensed users. A unique user is a user with a unique username who has logged in to Prisma Access at least once in a given period specified by
Time Range
.

Searching for a Specific Mobile User

To get the detailed data for a specific Mobile User, enter the username in the
Search All Mobile Users
search box. Be sure to enter the full user name. A tab opens with the user details displayed.

Monitoring Summary Tab

The
Prisma Access
Monitoring Summary
tab gives you an overview of the health status of all the Mobile Users logged into Prisma Access. This tab has the following widgets:

Top 5 Open Alerts by Severity

By default, only the nodes with the top 5 most severe alerts are displayed. The vertical lines represent the severity of the alerts. Drilling down into an alert gives you more context of the underlying issue. These alerts cannot be cleared manually. They can be cleared only by resolving the underlying issue.
View All Mobile User Alerts
link takes you to the
Alerts
page where you can filter the data displayed by
Status
and
Use Case
.
When you drill down into an alert, the alert details page opens in a tab. This page displays the status and description of the alert along with other information, such as the Alert Generation Timestamp, alert status as to whether the alert is open, the alert type, Prisma Access location from where the alert was generated, and the name of the tenant that was affected. Clicking on the name of the tenant opens the Prisma Access Location page for the tenant which shows you the detailed status for the tenant.

Mobile User License Consumption

View the statistics on the Mobile User license consumtion in this widget. You can see the total number of licenses purchased by Mobile Users and within that the number of licenses that were consumed by unique users that were connected to Prisma Access in the last 90 days since licenses are based on 90 days. A unique user is a user with a unique username who has logged in to Prisma Access at least once in the last 90 days.
If you select
GlobalProtect
under
Connect Method
, this widget displays data only for the number of licenses consumed by unique users connected using GlobalProtect in the last 90 days out of the total number of licenses allocated for users using GlobalProtect to connect to Prisma Access. Likewise, if you select
Explicit Proxy
under
Connect Method
, this widget displays data only for the licenses consumed by unique users connected through explicit proxy. If you select both (
All
), the widget displays the cumulative number of licenses consumed by unique users connected using GlobalProtect as well as explicit proxy. In this view, you can also see the split in the license consumption for GlobalProtect only or explicit proxy only.
In the image below, the bar at the bottom displays in percentage the number of unique user licenses consumed (21) compared to the total licenses(10,000).

Connected Users

The
Connected Users
widget displays in real-time the number of users connected to Prisma Access at any specific time during the selected
Time Range
and also the trend of the connected users over the time period. The data is filtered based on your selection in the
Connect Method
.
You can see the general trend of connected users over a specific period of time. When you hover over different points on the trend line, you get the number of users that were connected right at the timestamp shown. The datapoint value changes based on the
Time Range
selected.
Toggle
Peak
or
Average
based on the data you want to see by clicking on it.

IP Pools Reaching Maximum Capacity

This widget allows you to monitor the IP pools utilization. The real-time bar graph shows the IP pool utilization by different IP pool allocation theaters based on the number of connected users at that time. The IP pool utilization percentage on the bar graph is the number of IP pool blocks utilized out of all the IP pool blocks that are available across all the subnets. You can take proactive actions by adding subnets when you see an IP pool bar approaching the maximum capacity for any region.

Top 5 Most Active Prisma Access Locations for Mobile Users

The data displayed in this histogram is filtered based on your selection in the
Connect Method
. If you chose either
Explicit Proxy
or both
Explicit Proxy
and
GlobalProtect
you see the chart for users connected through explicit proxy. Otherwise, you see the GlobalProtect chart only.
Use this bar graph to view the most active Mobile User Locations based on the number of Connected Users at that time. It shows you the top five sites based on users connected to a particular Prisma Access location. Hover over a bar to see the details of the number of Mobile Users that were logged in by region in the specified
Time Range
.

Global Protect Version Distribution

This widget is displayed only when you select GlobalProtect under
Connect Method
. It shows you the GlobalProtect version that your user connections are running on their machine. Clicking a version opens the
Mobile Users List
tab which drills down into the data on the mobile user connection that is logged in. The trend line next to the version numbers is a graphic representation of the distribution of the GlobalProtect app version. This helps you track the adoption of new GlobalProtect versions over time.
The data displayed in this widget can be used to enforce compliance with the latest GlobalProtect app version.

User Connections to Prisma Access Locations

The map in this widget shows unique user connections (identified by username plus device ID) that logged in during the specified
Time Range
. If you click on a location, it takes you to the
Map View
for Mobile Users.

Map View Tab

The
Mobile Users
Map View
tab shows all the Mobile Users gateway locations and their status on a map.
The
Login Timeline
is based on the
Time Range
that you have selected and shows intervals within that time range. The user data that you see on the map (inverted triangle markers) is the data for the selected time slice within the
Login Timeline
. A time slice varies depending upon what you select in the
Time Range
filter. For example, if you selected
Last 7 Days
your time slice could be one day or if you select the
Last 15 minutes
, your time slice will be one minute. By default, the user data is set to show the last time slice on the
Login Timeline
. So, by default all the markers on the map will reflect the data for the selected time slice. To see the data for a different day, click one of the verticle lines in the
Login Timeline
. The color of the markers on the map represents the current status of the location. Use the legend in the widget to decipher the status based on the color. Hover on a location to see the name of the location and the number of unique user connections for the location. Clicking on a location icon shows the flight path from where the mobile user is connecting to the gateway. The flight path also shows where your users are connected from, if they are connecting from long range or short range. Long range connections are connections that are connecting from 500 miles or more from the Prisma Access Locations.
When you click on a location with GlobalProtect users, a side panel opens showing you the details for the user.

Mobile Users List Tab

The
Mobile Users List
tab provides data on how many users and user connections connected over
Time Range
period.

Unique Mobile User Connected Over Time

This widget displays the number of new unique Mobile Users who have logged in at least once during the
Time Range
out of the aggregate of all the users logged in.

Unique Mobile Users

The trend line in this widget shows how many unique users logged in during the specified
Time Range
.

Unique Mobile User Connections

This table displays all the unique connections within the specified time range and can also be filtered based on the data point that you select on the unique login. The table is filtered based on a data point that you click in
Unique User Logins Over Time
. When you click on a user ID in the table, you get the details on the user’s connection.
The
Connect Method
column shows you whether the user is connected to Prisma Access using GlobalProtect or explicit proxy. The columns displayed in the table will vary based on which
Connect Method
you have selected. For instance, if you selected
GlobalProtect
, you see the
OS Family/Version
and the
GP Client Version
columns but if you select
Explicit Proxy
, then these columns do not show. Instead, you see the
Browser
column that is applicable to explicit proxy. If you select both, then you see only columns that are applicable to both.
You can search for a specific Mobile User by entering the username in the
Search All Mobile Users
column. This opens the Mobile User details page for the user. Both
GlobalProtect
and
Explicit Proxy
will be selected in the
Connect Method
by default to ensure that all users are searched.

Mobile User Details Tab

If you click on a specific
Mobile User ID
in the
Unique Mobile Users Connections
table in the
Mobile Users List
tab, the data on this page will be filtered by default based on the
Connect Method
option that you had selected in the
Mobile Users List
tab.
The columns displayed in the
Mobile User Logins (per Device)
table will vary based on which
Connect Method
you have selected. For instance, if you selected
GlobalProtect
, you see the
OS Family/Version
and the
GP Client Version
columns but if you select
Explicit Proxy
, then these columns do not show. Instead, you see the
Browser
column that is applicable to explicit proxy. If you select both, then you see only columns that are applicable to both.
If a user has logged in using both
GlobalProtect
and
Explicit Proxy
, by default the data in the widgets will be filtered based on the
Connect Method
that was selected in the
Mobile Users List
tab. You can select a different option in the
Connect Method
with which to filter the displayed data. If you select both
GlobalProtect
and
Explicit Proxy
in
Connect Method
, the
Mobile User Logins (per Device)
table displays only the columns that are applicable to both. Any connect method specific columns (
GlobalProtect
or
Explicit Proxy
specific columns) will not be displayed.

Recommended For You