Prisma SD-WAN
Configure Custom Liveliness Probe
Table of Contents
Configure Custom Liveliness Probe
Learn to configure a custom liveliness probe for the Prisma Access
CloudBlades.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Prisma Access for Networks uses the concept of an Infrastructure subnet when
creating the Service Setup under the plugin. The Infrastructure subnet is required
for services within a given Prisma Access tenant.
When you create an Infrastructure subnet, the last usable IP address provided becomes
the following set of services within Prisma Access:
- Captive Portal Redirect IP Address
- Remote Network DNS Proxy IP address
- Tunnel Monitor IP Address
When the CloudBlade creates a standard VPN to Prisma Access, the default is to
use the Tunnel Monitor IP address within the Prisma Access infrastructure, using
a Liveliness Probe. There might be instances where a probe needs to be changed from
the default to monitor additional services external of Prisma Access to meet a
specific business requirement.
- Within the CloudBlade, the default is to use the last usable Infrastructure IP address. To use a different Liveliness Probe, uncheck the box within the CloudBlade.To configure a Custom Liveliness Probe, navigate to within the Prisma SD-WAN web interface.Within the Service & DC Groups, look for and click Manage Endpoints.The default view within Endpoints will be Prisma SD-WAN.Click Standard VPN from the drop-down.
![]()
For a given Prisma Access region, find and click Liveliness Probe.![]()
The default probe for Prisma Andorra, as chosen in this section, utilizes the last usable IP address in the infrastructure subnet.![]()
To add another IP address or modify the probe, edit or add an ICMP ping as appropriate.In the following example, add an additional ICMP probe.![]()
For this standard VPN to Prisma Access (Prisma Andorra), add an additional ICMP probe to 8.8.8.8 to the Liveliness Probe.![]()
Repeat this step for each location that needs adjustment on a given business requirement.
