Monitor and Troubleshoot the Aryaka Remote Network

The following sections show the tasks you perform to monitor traffic and troubleshoot issues for the remote network tunnel between the Aryaka SD-WAN and Prisma Access.

Monitor Remote Network Traffic

To monitor remote network tunnel traffic from the Aryaka SD-WAN, complete the following task.
  1. Click the
    Monitor
    tab, then select
    Cloud Security Connector Traffic
    .
  2. Pick a reference site, select a time, and click
    Apply
    .
    To zoom in any of these graphs, click a graph and drag the cursor.
    • The following information displays in the
      Internet Traffic
      graph:
      • Total Internet
        —All traffic forwarded to the internet.
      • Total Palo Alto
        —All internet traffic forwarded to Prisma Access.
      • Total Other
        —All traffic forwarded to internet that is not going to Prisma Access.
    • The
      Palo Alto Traffic
      graph shows traffic data (in Mbps) over IPSec tunnels to Prisma Access for the time period that you select. This graph shows traffic flow in both directions to Prisma Access.
    • The
      Palo Alto Received
      graph shows traffic received on the IPSec tunnels to Prisma Access. This graph shows all internet traffic inbound to the site from Prisma Access.
    • The
      Palo Alto Transmitted
      graph shows all traffic that is transmitted on IPSec tunnels to Prisma Access. This graph shows all traffic outbound to Prisma Access from the site.

Troubleshoot the Aryaka Remote Network

Prisma Access provides logs that provide you with the status of remote tunnels and the status of each tunnel. To view these logs in Panorama, select
Monitor
Logs
System
.
To debug tunnel issues, you can filter for tunnel-specific logs by using the object identifier corresponding to that tunnel. The following figures show errors related to tunnel misconfiguration and negotiation issues.

Recommended For You