Configure Application Reachability Probes
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Incidents and Alerts
Configure Application Reachability Probes
Learn more about the Prisma SD-WAN application reachability probes.
Application probes are initiated on detection of an unreachable prefix for an application.
Where Can I Use This? | What Do I Need? |
---|---|
|
|
Configure application probes to check an application's reachability for a given path
for an ION device. Application probes are initiated on detection of an unreachable
prefix for an application. You may configure application reachability probes on any
valid Layer 3 LAN interface.
Prisma SD-WAN supports dynamic probing
for TCP applications when 3-way handshake failures are detected. The ION device
generates these dynamic probes to verify that a destination service is actually up
or down on that path. If verified as down, the ION device avoids sending additional
user requests for the service down the specific path while continuing to generate
synthetic probes to detect any change in service reachability.
Starting with Release 6.3.2, Prisma SD-WAN supports probing for UDP DNS traffic. The application
probes handle DNS probe requests and start a DNS probe on the destination on
receiving a DNS probe request. If the DNS server responds to the request,
irrespective of whether it responds with the requested domain name, the ION device
treats the probe as successful. If the DNS server does not respond, the application
probe notifies the flow controller to change the path.
When the probe detects that the DNS server is
unreachable, the ION device continues probing once every minute for the first three
probes and then once every 5 minutes. If the probe is successful again, the probe
notifies the flow controller to use the path again.
You can view the health of the DNS traffic under MonitorActivityApp Health.
Application probe is enabled by default for all ION devices, except for ION 1000. The
controller port generates the application probes if you do not configure any LAN
ports for generating application probes.
For the ION 1000 device, you must configure a LAN port for the application probe. If
not, the controller generates an alarm.
You can choose to exclude specific circuits and circuit categories from being used
for checking the reachability of an application on a given path. Refer Configure Device Initiated
Connections.
- Select WorkflowsDevicesClaimed Devices, select the device you want to configure.
- Select Interfaces and a port for configuring application reachability probes.
- Select LAN in the For
Use this Port option.Once an interface is designated as the application probe interface, Use This Port For cannot be changed from LAN and Admin Up for the interface has to be Yes.
- Toggle Yes for Application Reachability Probe Source Interface.
- Select Static or DHCP for Configuration.
- Retain the default values for the other fields, and Save Port.
- View and update the application reachability probe configuration
from the Basic Info tab.
- Toggle Yes for Application Reachability Probe Source Interface.
- Select a port from the Source Interface drop-down. The ports which have Use This Port For set to LAN appear in the drop-down.
- Select None for Source
Interface to use the controller port as the source interface
for generating application probes.Ensure that you configure a source interface for ION device series 1200, 1200-S, 3200, 5200, and 9200, since these platforms do not have a dedicated controller port.