View and Monitor Network Services
Focus
Focus
Prisma Access

View and Monitor Network Services

Table of Contents

View and Monitor Network Services

View the performance of common network services that affect your user experience for accessing applications.
Where can I use this?What do I need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
You can see the performance of common network services that affect your user experience for accessing applications. Network services include reporting the number of GlobalProtect authentication successes and failures as a measure of mobile users being able to connect to Prisma Access and displays of DNS proxy requests and responses forwarded to servers during a time range you specify.

GlobalProtect Authentication

Go to MonitorNetwork ServicesGlobalProtect Authentication in Strata Cloud Manager to see GlobalProtect authentication successes and failures that affect your environment.
  • Set the Time Range filter to review network services data for that time range.
  • Specify a Prisma Access Location to view its authentication success, total failures, and timeout failures in the time range selected.
The data represents how many mobile users at a given time are trying to authenticate to a GlobalProtect portal, which then sends the mobile users’ credentials for verification to an on-premises active directory (AD) server, resulting in an authentication success or failure. If you see a large number of authentication failures, you can correlate the failures with a network event that indicates a problem with a certain location or an on-premises authentication server that was down. The data in these charts provide troubleshooting insights for network administrators who resolve network issues. You can view the count of authentication success or failure trends for mobile users at GlobalProtect portals and gateways, use this data to learn about the patterns of authentication successes or failures over time, and establish count ranges that can be normal or anomalous in your Prisma Access deployment. For example, anomalous counts could indicate existing users’ inability to connect to Prisma Access because to availability issues with GlobalProtect portals or slow authentication servers. Or, anomalous counts might represent large numbers of users onboarded to the customer’s network all at once.

GlobalProtect Authentication Success

View specifics about authentication success counts for GlobalProtect for different locations. Hover your cursor over any point in the graph to see details about the user counts for successful authentications at different Prisma Access location sites shown at a particular time.

GlobalProtect Authentication Total Failures

View specifics about authentication failure counts for GlobalProtect for different locations. Hover your cursor over any point in the graph to see details about the user counts for failed authentications at different Prisma Access location sites shown, such as US East and Canada East, at a particular time.

GlobalProtect Authentication Timeout Failures

View specifics about authentication failure count for GlobalProtect for different locations. Hover your cursor over any point in the graph to see details about the user counts for failed authentications at different Prisma Access location sites shown, such as US East and Canada East, at a particular time.

DNS

Go to MonitorNetwork ServicesGlobalProtect Authentication in Strata Cloud Manager to view DNS proxy requests and responses forwarded to servers during a time range you specify.
Filters you can use are:
  • Time Range
  • DNS Proxy Names
DNS proxy filter values are related to the last 30 days and are automatically selected when you load (that is, if there is no Explicit Proxy data, then there is no Explicit Proxy filter). Hover over the graph to see details about all Requests Sent and Requests Receivedto DNS proxy servers at a specific time.

Requests Sent

View network requests and queries forwarded to servers over the time range you specify. Hover your cursor over any point in the graph to see information about the requests sent to the DNS proxy servers at that time. If you selected a proxy name on which to filter, you see the data for that proxy.

Responses Received

View the total responses received across tenants during the time range you specify. Hover your cursor over any point in the graph to see information about the responses received at that time. If you selected a proxy name on which to filter, you see the data for that proxy.