>
    What’s New—Autonomous DEM
    Focus
    Download PDF
    Focus
    1. Home
    2. Autonomous DEM
    3. AI-Powered Autonomous DEM Release Notes
    4. Release Updates
    5. What’s New—Autonomous DEM
    Download PDF
    Autonomous DEM

    What’s New—Autonomous DEM

    Table of Contents

    What’s New—Autonomous DEM

    View the new features added in Autonomous DEM.
    Here’s what’s new in Autonomous DEM:

    What's New in December 2024

    The following new features were released in December 2024.

    Specific SD-WAN Path Monitoring

    Requires SD-WAN ION version 6.4.2 or later and ADEM agent 3.4.7 or later
    If you had synthetic application tests configured for remote sites before this change, you must check the configuration of those tests to ensure that they continue to run as expected.
    For any pre-existing application test for remote sites running ION version 6.4.2 or later:
    1. Edit the configuration of the application test.
    2. Check the value of Remote Sites Test OptionsApplication Entities.
    3. Ensure that Application Entities matches an application for which you've configured a Prisma SD-WAN path policy rule and that you want to run the application test on that path.
      • If yes, leave as is.
      • If not, set to ANY. Otherwise, the application test will not run.
    This does not apply to ION devices running version 6.4.1 or earlier. For those devices, no matter what is specified in Application Entities, the application test will run as expected. However, if you want to upgrade the device, make sure to follow the steps above so that you do not risk test interruption.
    If you have configured Prisma SD-WAN path policy rules for your remote sites, you can now specify that your synthetic application tests probe a particular SD-WAN path. This enables you to monitor the paths through which user traffic is actually flowing instead of all possible paths. Monitoring defined paths yields an application experience score that better reflects the real experience of your users so that you can make more informed decisions to improve or maintain application experience in your organization.

    What's New in October 2024

    The following new features were released in October 2024.

    Browser-Based Real User Monitoring (RUM)

    Real User Monitoring (RUM) uses a browser plugin to capture live web application performance from the user's perspective. This helps to reveal user experience issues that synthetic tests may not detect so that you can have a more complete understanding of user experience across your organization, take any possible remediation steps, and work to increase user productivity and satisfaction.
    RUM Benefits
    • Comprehensive View into User Experience: Gather a new set of metrics to help you understand the full user journey so that you can take the appropriate actions.
    • Enhanced Troubleshooting: View real-time application availability, usability, and the performance of underlying dependencies, such as APIs or microservices, enabling quicker and more accurate troubleshooting.
    • Faster Remediation: Combine RUM metrics with synthetic metrics to detect a wider range of performance degradation issues, identify root causes, and receive recommended remediation steps.

    Simplified App Test Configuration

    Application tests now use top-level domains or IP addresses instead of App-IDs to make it easier for you to define the targets for your application tests and provide better coverage for an application and its subdomains. Now, when you use a top-level domain as the target of your application test, the test also probes the subdomains so you can identify if any of the subdomains are causing experience issues.

    Security Profile Visibility on ADEM Access Analyzer

    You can use Access Analyzer to determine whether a security profile is blocking user access to a resource to save you time and effort manually investigating the logs.
      1. Start a query for users whose access you’re interested in.
        If the user does not have access due to a security profile, the query results will tell you which profiles attached to which policy rules are blocking user access.
      2. Analyze the access issue.
        1. If the user is hindered from accessing an application due to a Security Profile, the query results tell you which profiles attached to which policy rules are hindering user access.
        2. Select a query name to view its multidomain analysis. Under Results, you can view User & Endpoint health, Network level, Application Performance level, and Security Policy level.
        3. Under Security Profiles, admins can indicate that users were blocked or hindered due to real-time threats identified in the logs.
        4. Select Security Profiles. If there is a profile block, a block symbol is present next to the log title. Access Analyzer automatically filters the logs according to the Profile Subtype causing the access issue and the Profile Action blocking the traffic.
      3. Based on your findings, you can understand that the user is blocked due to a real-time threat seen in traffic and, if necessary, escalate the issue to a security administrator.

    What's New in September 2024

    The following new feature was released in September 2024.

    Configure Agent-Based Proxy for ADEM

    Learn about the Agent-Based Proxy for ADEM feature and how to configure it. Customers who choose to use Agent-Based Proxy access in Prisma Access require visibility into application access through Agent-Based Proxy as well as the performance of Agent-Based Proxy as an element of Prisma Access' service. With ADEM, Agent-Based Proxy forwards all internet traffic to Prisma Access and allows for customized forwarding beyond the scope of PAC based on:
    • Destination, user or user group, operating system, or location (static branch egress IPs).
    • Branches with dynamic egress IP addresses.
    • Geographic locations within the country.

    What's New in July 2024

    The following new feature was released in July 2024.

    Microsoft Teams Integration with ADEM

    The integration of Microsoft Teams meeting metrics with ADEM data provides visibility and root cause analysis to a wide user base, so users can resolve or communicate possible UCaaS performance issues before they affect end-user experience. The Microsoft Teams dashboard data correlates with ADEM synthetic data, giving networking team, UCaaS team, and help desk admins the information they need to troubleshoot Microsoft Teams calls.

    What's New in May 2024

    The following improvements were released in May 2024.
    ADEM Enhancements in the ADEM 5.1.0 Agent
    ADEM Agent is now modularized and called Access Experience. Access Experience can be used for multiple features based on the license activated, such as ADEM and App Acceleration. Other enhancements include:
    • An agent out-of-band upgrade.
    • New Access Experience Agent configuration options for GlobalProtect version 6.3 and above:
      • Install—Install the agent on the endpoint.
      • Uninstall—Uninstall the agent from the endpoint.
      • No Action—Retain the last agent state.

    What's New in November 2023

    The following new features were released in November 2023.
    Comprehensive Visualization of Application Performance for a Suite of Applications
    With the introduction of this feature, administrators will be able to select a single application test and add all relevant test targets associated with that application to the application test. Hence they can view your application test metrics as an aggregated view of all targets, as well as individual test target performance. Since you can now add multiple test targets to a single application test, you cannot create multiple tests for that same application. Administrators are offered the drill down visibility to each test target. For more information, see Comprehensive Visualization of Application Performance for a Suite of Applications
    ADEM support for FedRAMP High
    The Federal Risk and Authorization Management Program (FedRAMP) is a United States government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services for government users. Palo Alto Networks has demonstrated FedRAMP compliance.
    To ensure FedRAMP High "In Process" compliance, Prisma SASE FedRAMP High In Process introduces support for additional Prisma SASE apps, add-ons, and certain features.

    What's New in September 2023

    The following new feature was released in September 2023.
    Introducing ADEM APIs
    The ADEM APIs provide access to ADEM data for real-time and historical monitoring of user, applications, and sites across your deployment. Each API is illustrated with an example highlighting the lines in the API Response code that correspond to the area in the UI where the data appears. There is an FAQ section in the guide that provides details on the usage of parameters.

    What's New in March 2023

    The following new feature was released in March 2023.
    ADEM Zoom Integration
    ADEM has partnered with Zoom to provide the first per-minute root-cause analysis on the market. This helps administrators debug, monitor, and proactively identify the performance issues impacting Zoom users in their organization. To enable this feature, you will need to purchase a Zoom Quality of Service Subscription (QSS) license from Zoom. This integration provides minute-by-minute analysis of all the Zoom calls in a customer's network. See Autonomous DEM Zoom Integration for details on this feature.

    What's New in January 2023

    The following new feature was released in January 2023.
    Prisma Access Locations Dashboard updated
    The following changes have been implemented in the Prisma Access Locations dashboard:
    • New widgets have been added to show all Network Performance and Application Performance metrics monitored for all applications from cloud agents.
    • The Map View shows the application distribution data for connected Mobile Users and Remote Sites at that location.
    • The left border of the application distribution pop-up that appears when you hover your mouse cursor over a circle in the Map View is color-coded such that it represents the overall status that is lower of the Mobile Users status and Remote Sites status.
    • You can filter the data in the dashboard by deployment type.

    What’s New in December 2022

    The following new feature was released in December 2022.
    New Role Available - ADEM Tier 1 Support Role
    ADEM provides role-based access control to the IT Administrators. Administrators who log in with ADEM Tier 1 Support role get read-only access to the ADEM application only. Refer to Role-Based Access Control in ADEM for details.

    What’s New in October 2022

    The following new feature was released in October 2022.
    ADEM Self-Serve
    ADEM now offers end-user notifications for issues that they can resolve directly. With ADEM Self-Serve, when end users experience issues with either application experience, device usage, WiFi, or internet connectivity, they get a notification on their desktop. The notification indicates what the issue is and guides them with one or more possible solutions that they can use to resolve the issue on their own. This enhances user productivity and has the potential to reduce the number of IT tickets. Clicking in the notification opens the Application Experience user interface which provides more details on the issue.
    Transition to Prisma SASE Platform
    Prisma Access is being transitioned to the Prisma SASE Platform to provide these benefits. As a part of this transition, you may experience a difference in the steps to access Prisma Access.

    What’s New in June 2022

    The following new feature was released in June 2022.
    Support for Selecting Mobile User Groups
    When creating synthetic tests, you now have the option to enable the test on an individual Mobile User or on a Mobile User group or both. You can enable tests only on existing groups that are used in security policies. The tests that you enable on a user group will run on all devices that belong to every single user in that group. You cannot select only certain devices on which to run the test. If a user is removed from a user group, the tests will automatically stop running on the user’s devices. When new users are added to a group, the tests will automatically be run on the new user’s device(s). The test results can be filtered by individual Mobile Users or Mobile User groups (only groups currently in test configuration).
    The following UI pages have been updated to support this feature:
    • New App Test page approached from the Applications page.
      Under the Source section, for Mobile Users, a new Custom option has been added which allows you to select either a single Mobile User or a Mobile User group or both.
    • A new filter called Mobile User Groups has been added on the following pages:
      • Settings
      • Applications
      • Mobile Users

    What’s New in April 2022

    The following new feature was released in April 2022.
    Mobile User changes
    The following UI changes have been made with respect to the Mobile User devices:
    • Summary page
      The widget for Experience Score for Top Monitored Mobile User Devices displays a separate card for each of the User/Device combination along with the device and hostname details.
    • Monitored Mobile Users page
      Monitored Users are now defined as the unique number of User/Device combination. For example, if 2 users are logged in to 3 devices each, the Devices count will display as 6 and the Users count will display as 2. Likewise, if 2 users are using the same device, the Devices count will display 1 and the Users count will display 2. The Monitored Mobile Users Devices table on the Monitored Mobile Users page displays each User/Device combination as a separate row, hence the user name could be duplicated across multiple rows depending on the number of devices he/she is logged in to.
    • Mobile User Details page
      In the Monitored Mobile Users Devices table on the Monitored Mobile Users page table, when you click on a user who has logged into multiple devices, the ensuing Mobile User Details page lists all devices for the selected user. Each unique User/Device combination is represented in a separate card. You can view the details of only one device at a time by selecting its card. The details in the widgets that follow will be displayed for the device card you select.
    Autonomous DEM Agent Installer Available on the CSP
    You can now download the Autonomous DEM agent installation package from the Customer Support Portal. This allows you to upgrade your ADEM agent without having to upgrade your GlobalProtect app.
    You can deploy Autonomous DEM agent that you download from the CSP to your endpoints using the same methods you would deploy the GlobalProtect app:
    • For Windows endpoints, you can obtain the update by navigating to Software Updates in the Customer Support Portal. Search for GlobalProtect Autonomous DEM for Windows64.
      To deploy the agent to Windows endpoints, use Msiexec or via an MDM.
    • For Mac OS X endpoints, you can obtain the update by navigating to Software Updates in the Customer Support Portal. Search for GlobalProtect Autonomous DEM for OS X.
      To deploy the agent to MacOS endpoints, use the macOS plist or via an MDM.

    What’s New in November 2021

    The following new feature was released in November 2021.
    Support for Remote Sites
    ADEM is now natively integrated with Prisma SD-WAN and will deliver exceptional user experience for Palo Alto Networks Prisma SASE. ADEM for Prisma Access together with Prisma SD-WAN provide comprehensive visibility into remote site experience by providing segment wise insights on all WAN paths (active and backup). This helps you quickly isolate the domains and WAN paths that are experiencing degraded experience for remote site users and devices.
    View the overall experience score of your remote sites in the Summary tab by selecting the Remote Site Experience card. The Remote Sites dashboard provides experience details for each site.
    The Remote Sites Experience card in the Summary tab is visible only if you have purchased the Service Setup license.
    For details on this feature, refer to the Remote Sites dashboard.

    What’s New in October 2021

    The following new features were released in October 2021.
    ADEM for Hybrid Workforce
    Optimizing User Experience and application performance across hybrid work environments on and off campus.
    With Autonomous DEM for Hybrid Workforce, regardless of whether Prisma Access GlobalProtect Mobile Users are connected from an untrusted network or a trusted network, Autonomous DEM will continue to provide User Experience and Application Performance Monitoring.
    Autonomous DEM can be enabled when GlobalProtect Clients connect to Prisma Access. Once enabled, it will continue to monitor user experience across hybrid work environments on and off campus.
    For more details on this feature, refer to the First Look at Autonomous DEM Dashboards.
    Disable All Autonomous DEM Update Notifications
    Starting in GlobalProtect version 5.2.8, you have the option to suppress receiving all Autonomous DEM update notification on the Mobile User devices. See Enable ADEM in Panorama Managed Prisma Access for Mobile Users or Enable ADEM in Cloud Managed Prisma Access for Mobile Users for details.

    © 2024 Palo Alto Networks, Inc. All rights reserved.