Manage Prisma Access Locations
The
Prisma Access Locations
dashboard gives
you an overview of the health of all your Prisma Access locations
for your remote networks and mobile users.
View the Health of Your Prisma Access Locations
The
Prisma Access Locations
tab
gives you an overview of the health of all your Prisma Access locations
for your remote networks and mobile users. The graphs show you the
status of all your remote networks, service connections, GlobalProtect
mobile users, and Explicit Proxy mobile users. The graphs are color-coded
to represent the number of networks that are up (green), down (red),
unknown (gray), or have warnings that need your attention (yellow).
The bar graphs in each widget shows the top five Prisma Access locations for
remote networks, service connections, GlobalProtect mobile users,
and Explicit Proxy mobile users, based on the total bandwidth consumed
during the selected Time Range
. The following example shows
Prisma Access locations for GlobalProtect mobile users.
Prisma Access Locations Status
View the
(Number of) Prisma Access Locations
status
in real time. This table shows the number of connected Remote Network
sites, connected Service Connection sites, and unique users logged in
to Prisma Access in real time. The Prisma Access Insights user interface
displays up to 10,000 records in a table. If you have more than
10,000 records, you can view them by exporting the table into a
CSV format by clicking Export CSV
. Any filters that you might
have applied to the data in the table are also applied to the data
that is being exported to the CSV format. The columns that do not
have data in them do not get exported and are omitted in the exported
CSV file. The
Location Status for GP Mobile Users
and the Location Status
for EP Mobile Users
are displayed depending upon your Connect Method
selection.
The Users Logged In
column displays an aggregation of both
Explicit Proxy and GlobalProtect connected users. Within a specific location,
if a user logs in from multiple hosts, the user is counted as a
single user, but if any user logs in from two different Prisma Access
locations by disconnecting from one and logging in from another
within the time period, the user is counted as two users.
Manage Prisma Access Locations Cortex Data Lake Connectivity
The
Cortex Data Lake Connectivity
(CDL) tab
gives you visibility into the CDL connectivity health status from
all your Prisma Access instances for the CDL region that you selected
during your Prisma Access license activation. It helps you determine
if firewalls have disconnected from CDL and firewall logs are no
longer being obtained. Each tenant can connect to only one Cortex
Data Lake in any region of its choice. Insights polls the CDL database
every five minutes to check for connectivity between the nodes (Mobile
Users, Remote Networks, and Service Connections) and the CDL database.Remote Networks, GlobalProtect Mobile Users, and Service
Connections
Information about
Remote Networks
, GlobalProtect
Mobile Users
, and Service Connections
display data in
real time.
The widgets display the overall connectivity status from each
node type (Remote Networks, Service Connections, and Mobile Users)
to CDL. The number displayed in each ring chart represents the total
number of Prisma Access Locations from where the nodes connect to
CDL. Each location could further have one or more firewalls in it.
The status of the connections are shown in real time. The
Time
Range
filter does not apply to these widgets. The chart is
color-coded based on how many remote sites, mobile users, or service
connections are currently in the following status:- Connected: All firewalls in the region are connected to CDL.
- Disconnected: All firewalls in a region are disconnected from the CDL.
- Partially Connected: One or more firewalls in the region are disconnected from the CDL.
Prisma Access Location CDL Connections
Prisma Access Location CDL Connections
is a
tabular representation of all the Prisma Access Locations and shows
the status of each node type per location. Each location can have
one or more node types associated with it. Hence, the sum of all
the locations in the three ring charts may not necessarily tally
with the number of Prisma Access Locations displayed in this table. This
is because a location is represented only once in the table, regardless
of whether it is counted in all three ring charts or only one or
two ring charts.
The table displays the CDL connectivity status for each
Prisma Access
Location
. Click on the down arrow next to a location
to see the Total Disconnections
chart open
beneath the row. Use the Time Range
filter
to see the data in the chart for a specific time range. Disconnections
are counted by the number of times firewall instances at that location
got disconnected. For example, if a node or firewall was disconnected,
then connected and disconnected again, the number of disconnections
would be counted as two. If you would like to see the specific node
type in the location that was disconnected, you can select the Prisma
Access Location
name to view the details page for that
location, then select the Node Type
to filter
the data by the selected node type.The
Last Disconnection
column shows when
the last time was that any node type (Mobile User, Service Connections,
or Remote Networks) in the location was disconnected, even though
it has been reconnected since then. It displays the latest outage
that has since been recovered. If a node type is currently disconnected,
the current disconnection data does not appear in this column.The
Duration of Last Disconnection
column
shows the duration of the disconnection starting from the second
the CDL connection was lost to the second the connection was recovered.
This allows you to see the full duration of the disconnection.Select a
Prisma Access Location
name to
open the CDL Region details page for the location.Total Disconnections
displays an aggregate
of all disconnections for all nodes types in the selected location
during the time period selected in the Time Range
.
To filter the data for only one node type, select the Node
Type
. This widget shows you for how long the connections
from this region to CDL were lost. The peaks in the graph indicate
that there were one or more disconnections at the time indicated
by the X-axis.Select a point on the
Total Disconnections
trend
line to filter the data displayed in the Disconnection
Durations
chart to show the connection status for the
next five minutes, starting from the time point that you clicked.It also displays the
Disconnection Durations
for
the selected Time Range
. The Disconnection
Durations
widget displays the disconnection duration(s)
that each node experienced during the Time Range
that
you selected. Each row represents a single node (firewall instance)
and is color-coded based on the node type (Remote Networks, Mobile
Users, or Service Connections). For example, if there are three
remote sites experiencing disconnections, you see three rows with
the same color lines. Each row represents a unique Cortex Data Lake
connection. Only the nodes that have experienced disconnections
are shown.