Focus
Strata Cloud Manager

Operational Health

Table of Contents


Operational Health

Review the data provided by the Operational Health view.
The Operational Health view shows the health of infrastructure and user experience on your network. You can use this view to monitor the health of your NGFWs, Prisma Access deployments, and Prisma SD-WAN branch sites as well as the user experience on your network and review the severity of open incidents in each area.
Operational Health Licenses
  • Monitoring subscriptions, including:
    • ADEM Observability
    • AI-Powered ADEM
    • AIOps for NGFW premium
  • Strata Logging Service (SLS) add-on for Prisma SD-WAN — required for Prisma SD-WAN branch site data to appear
  • ADEM license (optional) — enables the Remote Site Experience Score widget for Prisma SD-WAN branch sites

Central Operational Health View

The central Operational Health view provides a look into the health of infrastructure and of the user experience on your network. If users have an Autonomous Digital Experience Management (ADEM) license, they will receive enhanced data in this view.
The Operational Health view will show how your Palo Alto Networks ADEM subscription monitors the digital experience across all users and branch sites, and applications in your SASE environment. The view also surfaces incidents detected on Prisma Access and NGFW deployments. The bottom widgets provide additional detail on user experience scores, site experience scores, and critical incidents across your network.
The lines in the central Operational Health view represent all the users and branch sites on your network. Users are organized by user experience score, and branch sites are organized by site experience score, with the colors of the lines representing a rating of good, fair, poor, or unmonitored.
Domains are listed from lowest to highest experience score, so the most problematic destinations appear at the top of the list, making it easier to prioritize troubleshooting.
Hovering over any domain name shows two experience scores (when applicable):
  • User Experience Score — reflects the quality of access to that domain for individual users
  • Site Experience Score — reflects the quality of access to that domain from branch sites

Source Types and Sub-Types

The Operational Health view supports two source types:
  • Users — Individual end users connecting through Prisma Access, Prisma Browser, or agentless proxy
  • Branch Sites — Prisma SD-WAN and third-party branch sites, allowing admins to view operational health from the perspective of an entire branch location rather than individual users
Source sub-types available for filtering:
Sub-TypeWhat it represents
Prisma BrowserUsers accessing applications through Prisma Browser
Access AgentUsers connecting via the Prisma Access agent
Agentless ProxyUsers connecting through an agentless proxy
Prisma SD-WAN Branch SitesBranch sites connected through Prisma SD-WAN
Third-Party SitesBranch sites using third-party connectivity
PAN-OS SD-WAN SitesBranch sites using PAN-OS SD-WAN (NGFW-based, distinct from Prisma SD-WAN)

Prisma SD-WAN in Operational Health

Prisma SD-WAN data is surfaced within the Operational Health view through the Users and Branch Sites source types. Admins can filter by Prisma SD-WAN Branch Sites as a source sub-type to view experience scores and incident data specific to branch locations connected through Prisma SD-WAN.
The Operational Health view displays the following for Prisma SD-WAN branch sites:
  • Site Experience Scores — the quality of application access from Prisma SD-WAN branch locations, broken down by Good, Fair, Poor, and Unmonitored
  • Open incidents generated by Prisma SD-WAN, visible in the Critical Incidents widget

Average User Experience

The Average User Experience widget gives you a quick view into the overall experience score for users on your network, the change in that score from the selected time range, and a breakdown of users by experience rating — Good, Fair, and Poor. The score reflects the quality of application access for individual end users as measured across segments of the service delivery chain from their device to the application.
Click through to the NetSec Health Dashboard (InsightsOperationalNetSec HealthUser Devices) for a detailed breakdown of user experience by device, location, and application, along with performance metrics and troubleshooting guidance.

Average Site Experience

The Average Site Experience widget gives you a quick view into the overall experience score for branch sites on your network, the change in that score from the selected time range, and a breakdown of sites by experience rating — Good, Fair, and Poor. The score reflects the quality of application access from branch locations as measured across segments of the service delivery chain from the site to the application.
Click through to the NetSec Health Dashboard (InsightsOperationalNetSec HealthSite) for a detailed breakdown of site experience by location, application, and path type, along with performance metrics and troubleshooting guidance.

Critical Incidents

The Critical Incidents widget gives you a quick view into the total number of critical open incidents across your deployment, the change in that count from the selected time range, and a breakdown by scope — including Prisma Access locations, NGFW devices, Prisma SD-WAN branch sites, and third-party branch sites. This gives you an immediate sense of where the most severe operational issues are concentrated across your network infrastructure.
Click through to the Incidents dashboard (Incidents and AlertsSummary) for a full view of all open incidents organized by severity, scope, and subcategory.