View and Monitor Branch Sites
Focus
Focus
Prisma Access

View and Monitor Branch Sites

Table of Contents

View and Monitor Branch Sites

View the health and connectivity of your Remote Networks and the usage of all your Remote Networks deployed in different Prisma Access locations.
Where can I use this?What do I need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • Prisma Access (Managed by Panorama)
Select MonitorBranch SitesPrisma Access to view the health and connectivity of your Remote Networks and the usage of all your Remote Networks deployed in different Prisma Access locations. It shows you the real-time connectivity status and bandwidth consumption details, along with other deployment details. Mobile Users, branch offices, and retail locations connect to Remote Networks. You can also view the health of the tunnels configured in your Remote Networks and Mobile Users.
See Prisma Access Remote Networks for information about how to plan your remote networks, allocate remote network bandwidth, and onboard remote networks.

Sites by Status

View your Remote Networks Sites by Status. You can see how many sites are Up, Down, Inactive, or Not Available, and how many sites have a Warning during the selected Time Range.

Bandwidth Consumption

Bandwidth Consumption shows the highest peak bandwidth consumed at a Compute Region across all Compute Regions of the tenant in the case of the Aggregate Bandwidth Allocation model. The highest peak bandwidth consumed by a site across all sites is shown for the per site bandwidth allocation model. The peak values are computed for the selected time filter duration.
Select View Consumption by Compute Region to view consumption values and trend charts for all Compute Regions and their configured IPSec Termination Nodes.

Bandwidth Consumption Trend

On the main Branch Sites page, you can view your Bandwidth Consumption Trend Sites per Compute Region for all Compute Regions when using the Aggregate Bandwidth Allocation model or Bandwidth Consumption Trend per Branch Sites when using the Per-Site Bandwidth Allocation Model. For the Aggregate Bandwidth Allocation model, you can select a Compute Region and then select the sites in that Compute Region whose bandwidth consumption trend is of interest. Filter the data to refine the information you want to view, and you can hover over the chart to view the sites' bandwidth consumption at that time:
  • The default view shows Cumulative (Ingress + Egress) bandwidth consumption. Other options are Ingress, Egress, or Ingress vs. Egress.
  • View the Peak, Median, or Average bandwidth consumption trend during the selected time range. The default setting is Peak bandwidth consumption.
  • Log Scale or Linear Scale.
  • Compute Region—View Compute Regions with a breakdown of sites terminating in the region when the tenant uses the Aggregate Bandwidth Allocation model. For each Compute Region, select the sites terminating in the Compute Region to view their bandwidth consumption trend.
  • Branch Sites—Select a minimum of 1 site and a maximum of 10 sites to view their trend lines on the graph during the selected time range.

Prisma Access Sites

The Prisma Access Sites table lists your remote Prisma Access sites and information.
  • Site Name—The Prisma Access site's unique name.
  • Site StatusUp, Down, Warning, or Unknown.
  • Site Type—Third Party.
  • Site Location—Prisma Access site location.
  • Site BGP Status—Whether the site BGP status is Up, Down, or Unknown.
  • Tunnel Status—The number of the site's tunnels and how many of those tunnels are up.
  • Tunnel BGP Status—The BGP status for each tunnel.
  • Prisma Access Location—This Prisma Access site's location. Select a location to view its Prisma Access Locations details.
  • Service Status—This field indicates the status of the instance or firewall to which the site is connected. The status can be Up, Down, or Unknown.
  • Compute Location—All Prisma Access locations are mapped to a security processing compute location or region based on optimized performance and latency. At least two (often more) Prisma Access locations that are geographically near each other are grouped into a single compute location.
  • Aggregated Bandwidth Allocated—The allocated aggregated bandwidth for the site during the time range selected. This column appears only you used the Aggregate Bandwidth Model.
  • Peak Burst Bandwidth Consumed—The cumulative peak value obtained by combining the ingress and egress values for this site during the selected time range selected.
  • Avg Bandwidth Consumed—The cumulative average value obtained by combining the ingress and egress values for this site during the selected time range.
  • Disconnections—How many disconnections occurred at this site during the selected time range.
  • Disconnections Duration—The total amount of time, in seconds, the site was disconnected during the selected time range.

Prisma Access Site Details

Select any Prisma Access Site Name to view its details. View its Branch Site Status, as well as the Bandwidth Consumption Trend for the last 30 days.
Baseline computation requires you to have the ADEM-AIOps license.
  • Inside Baseline—When the values shown in the graph are within the baseline, the values for that period appear in blue.
  • Outside Baseline—When the values in the trend line shown in the graph deviate from the baseline's upper or lower limits, the trend line for that period appears in red.
  • Baseline—Baseline data is calculated in 1-hour bin sizes and takes into consideration the last 28 days of data from those hour-long bins for a particular tunnel.
  • No Data—No data available for the time period shown.
  • Allocated—The amount of bandwidth allocated.

Tunnels

See how many tunnels there are for this site, and view each tunnel's details. To download Tunnels data, select the Download icon.
  • Prisma Access Location—The Prisma Access location for this remote network.
  • Tunnel StatusUp, Down, Init, or Unavailable.
  • Tunnel BGP StatusUp, Down, or Unknown.
  • Tunnel Monitoring—If you have enabled Tunnel Monitoring, this column shows whether it's Up or Down. If you haven't enabled it, this column shows Not Configured.
  • Average Throughput—The amount of traffic flowing through the tunnel for the selected time range.
  • Peak Throughput—The peak bandwidth for the tunnel for the selected time range.
  • Source IP Address—The user's source IP address.
  • Destination IP— Destination IP address on the HQ or data center network for Prisma Access to determine whether the tunnel is up.
  • Disconnections—Number of disconnections during the selected time range.
  • Disconnections Duration—How long, in seconds, the tunnel is disconnected during the selected time range.
Select a Tunnel Name to see its Tunnel Status, Bandwidth Consumption Trend, and other tunnel details.

Tunnel Trends

With Tunnel Monitoring enabled, you can select a number of tunnels and view their median Round-Trip Time. If you don’t specify a set of tunnels, by default the median RTT is computed for the 10 tunnels with the highest observed RTT.
Aggregated Tunnel Connectivity shows you the total number of connected tunnels for the selected time range. Hover over either graph to see the number of connections at a specific time.
Commits Pushed shows how many commits were pushed during the selected Time Range and when the Last Push Commit occurred.

Site Status

Site Status shows site availability during the time range selected. Green means the site was up during this time, red means the site was down, and gray means no data was available during the time shown.

Health

Health shows you that the Site Status is Up, and it shows the name and status of each tunnel in the site.

Connectivity

Connectivity shows the Prisma Access location the site is connected to, its source and destination IP addresses, and the Prisma Access node status.

Consumption

Consumption shows the highest peak bandwidth consumed at a Compute Region across all Compute Regions of the tenant in the case of the Aggregate Bandwidth Allocation model. The highest peak bandwidth consumed by a site across all sites is shown for the per-site bandwidth allocation model. The peak values are computed for the selected time filter duration.
  • Bandwidth Allocated—The amount of bandwidth allocated.
  • Bandwidth Consumption Rate—The percentage of total bandwidth consumed.
  • Average Bandwidth—The average bandwidth consumption rate.
  • Alerting threshold—90% of the allocated bandwidth. When you use more than 90% Prisma Access creates an alert.

View Consumption by Compute Regions

Navigate to MonitorBranch SitesPrisma Access. When using the Aggregate Bandwidth Allocation model, select View Consumption by Compute Regions in the Bandwidth Consumption widget to see bandwidth consumption and trends for your regions. The Compute Regions page shows bandwidth consumption data during the Time Range you select. You can view a table with your Compute Regions' Average Bandwidth, Median Bandwidth, and Peak Bandwidth.
The Bandwidth Consumption Trend by Compute Region graph shows data about your Compute Region. Filter the data to refine the information you want to view.
  • Cumulative (Ingress + Egress), Ingress, Egress, or Ingress vs. Egress.
  • Peak, Average, or Median.
  • Log Scale or Linear Scale.
  • Compute Region—Select the region(s) you want to view.
The IPSec Termination Node Utilization graph allows you to view bandwidth consumption for the IPSec Termination Nodes configured at a specific Compute Region. Filter the data to refine the information you want to view:
  • Select the Compute Region for which you want to view data.
  • Select the specific Site of the Compute Region you want to see.
  • Choose Node Aggregate or Breakdown by Sites to view the bandwidth consumption trend for the sites that terminate at the selected IPSec Termination Node.
  • View Peak, Average, or Median.
  • View Log Scale or Linear Scale.