Prisma SD-WAN
Verify Standard VPN Endpoints
Table of Contents
Verify Standard VPN Endpoints
Learn how to verify standard VPN endpoints, configure standard groups, and assign
domains to sites.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
With the Prisma Access for Networks Integration (Panorama managed)
CloudBlade, standard endpoints for all Prisma Access regions will be created
automatically. In addition, each of the endpoints will be configured with a Liveliness
probe to the Prisma Access firewall monitor address. The monitor will run an ICMP
check every 10 seconds and mark the tunnel as failed after three (3) consecutive
failures. The only action required will be to add these endpoints to Groups and
Domains.
Configure Standard Groups
With the Prisma Access for Networks Integration (managed by Panorama) CloudBlade
installed, three default standard groups will automatically be created:
- Prisma Access: Active
- Prisma Access: Backup
- Prisma Access: All Regions
The only action required will be to add the appropriate Prisma Access Region
endpoints to these Groups and Any Domains (as needed).
If you are a new user, the only default standard group created is
Prisma Access: All Regions.
- Go to .
![]()
- Select Add Domain, provide a Domain Name, and click Add.
- Next, map the service endpoints to the appropriate Prisma Access:
Active and Prisma Access: Backup groups
in each domain.If more than one endpoint is part of a group, they will be considered equal in network policy path selection.
- Finally, proceed to binding domains to sites.
Assign Domains to Sites
Binding a domain is essentially mapping a site to a domain, enabling access to all
the endpoints within groups or domain. Different domains can be mapped to different
sites, but only one domain can be mapped per site.
- Go to .
- From the Domain drop-down for a site, select the appropriate domain.