You can see the performance of common network services that affect your user experience
for accessing applications. Network services include reporting the number of
GlobalProtect authentication successes and failures as a measure of mobile users being
able to connect to Prisma Access and displays of DNS proxy requests and
responses forwarded to servers during a time range you specify.
GlobalProtect Authentication
Go to MonitorNetwork ServicesGlobalProtect Authentication in Strata Cloud Manager to see GlobalProtect authentication
successes and failures that affect your environment.
Set the Time Range filter to review network services data
for that time range.
Specify a Prisma Access Location to view its
authentication success, total failures, and timeout failures in the time range
selected.
The data represents how many mobile users at a given time are trying to authenticate
to a GlobalProtect portal, which then sends the mobile users’ credentials for
verification to an on-premises active directory (AD) server, resulting in an
authentication success or failure. If you see a large number of authentication
failures, you can correlate the failures with a network event that indicates a
problem with a certain location or an on-premises authentication server that was
down. The data in these charts provide troubleshooting insights for network
administrators who resolve network issues. You can view the count of authentication
success or failure trends for mobile users at GlobalProtect portals and gateways,
use this data to learn about the patterns of authentication successes or failures
over time, and establish count ranges that can be normal or anomalous in your Prisma
Access deployment. For example, anomalous counts could indicate existing users’
inability to connect to Prisma Access because to availability issues with
GlobalProtect portals or slow authentication servers. Or, anomalous counts might
represent large numbers of users onboarded to the customer’s network all at
once.
GlobalProtect Authentication Success
View specifics about authentication success counts for GlobalProtect for
different locations. Hover your cursor over any point in the graph to see
details about the user counts for successful authentications at different Prisma Access location sites shown at a particular time.
GlobalProtect Authentication Total Failures
View specifics about authentication failure counts for GlobalProtect for
different locations. Hover your cursor over any point in the graph to see
details about the user counts for failed authentications at different Prisma Access location sites shown, such as US East and Canada East, at a
particular time.
GlobalProtect Authentication Timeout Failures
View specifics about authentication failure count for GlobalProtect for different
locations. Hover your cursor over any point in the graph to see details about
the user counts for failed authentications at different Prisma Access
location sites shown, such as US East and Canada East, at a particular time.
DNS
Go to MonitorNetwork ServicesGlobalProtect Authentication in Strata Cloud Manager to view DNS proxy requests and responses
forwarded to servers during a time range you specify.
Filters you can use are:
Time Range
DNS Proxy Names
DNS proxy filter values are related to the last 30 days and are
automatically selected when you load (that is, if there is no Explicit Proxy data,
then there is no Explicit Proxy filter). Hover over the graph to see details about
all Requests Sent and Requests
Receivedto DNS proxy servers at a specific time.
Requests Sent
View network requests and queries forwarded to servers over the time range you
specify. Hover your cursor over any point in the graph to see information about
the requests sent to the DNS proxy servers at that time. If you selected a proxy
name on which to filter, you see the data for that proxy.
Responses Received
View the total responses received across tenants during the time range you
specify. Hover your cursor over any point in the graph to see information about
the responses received at that time. If you selected a proxy name on which to
filter, you see the data for that proxy.