Performance Policy Default Behavior
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Performance Policy Default Behavior
List all the default behavior for Performance Policy
Where Can I Use This? | What Do I Need? |
---|---|
|
|
The system automatically assigns a default policy stack to a site as part of the default
policy configuration. You can't remove the default set from the default stack, the
default rules from the set, or the default threshold profile from the rules. Your
ability to make changes be limited to editing the actions and thresholds for default
policy rules. After you configure a rule, it takes precedence over the default rules
based on the order of rules. The default values for media apps are set at latency = 150
ms, packet loss = 2%, and jitter = . For all other Apps, default values are latency =
500 ms, packet loss = 5%, and jitter = 100 ms.
After upgrading an ION device to version 6.3.1 or higher, the system automatically
applies the following three default performance policy rules to the site.
- Default Performance Policy Rule forAction Visibility
- Intent: This rule uses the Performance SLA (Latency: 150 ms, Packet Loss: 2%, Jitter: 75 ms) to control the threshold lines available under.MonitorBranch SitesPrisma SD-WAN > {Site Name}{Circuit Name}{Secure Fabric}
- Action: Visibility
- Performance SLA: Default performance SLA for media apps.
- Latency: 150
- Packet Loss: 2
- Jitter: 75
- Default Performance policy rule forAll Media Apps
- Intent: This rule attempts to utilize an active path (as listed in the path policy) that meets the conditions of the performance SLA (Latency: 150 ms, Packet Loss: 2%, Jitter: 75 ms), for Audio and Video media apps. If no active paths are compliant, it will use the backup paths.
- Action: Move Flows
- Performance SLA: Default performance SLA for media apps.
- Latency: 150
- Packet Loss: 2
- Jitter: 75
- App Filters: Audio, Video (Transfer Type).
- Default Performance Policy Rule forAll Apps
- Intent: This rule attempts to utilize an active path (as listed in the path policy) that meets the conditions of the performance SLA (Latency: 500 ms, Packet Loss: 5%, Jitter: 100 ms), for bulk and transactional apps. If no active paths are compliant, it will use the backup paths.
- Action: Move Flows
- Performance SLA: Default performance SLA for media apps.
- Latency: 500
- Packet Loss: 5
- Jitter: 100
- App Filters: Transactional, Bulk (Transfer Type).
You can edit the default policy SLAs to customize Prisma SD-WAN according to the specific requirements of your network. Default rules are not editable, only the default SLAs can be edited.
Default Service Health Probe Behavior
After upgrading an ION device to version 6.4.1 or higher, the system
automatically applies the following three default service health probes to each
circuit:
If you were an existing customer at the time
of the 6.4.1 controller upgrade (April 2024), the service health probes will be
created, attached to the default probe profiles, which are bound to the
appropriate (nonmetered) circuit categories but, in a disabled state. The
default service probes can be enabled globally for each of the three probes
under . If your tenant was created after the 6.4.1 controller upgrade,
then the three default service health probes will be enabled for the nonmetered
circuit categories and no further action is required.
Manage
Prisma SD-WAN
Resources
Probes
Probe Config
Default Service Probe for CloudFlare DNS ICMP
- Probe Name: CloudFlare DNS ICMP Response
- Intent: ICMP response for CloudFlare DNS is used to measure general internet network conditions across all paths. This probe should be used as an SLA input for general internet-destined traffic.
- IP Address: 1.1.1.1
- Protocol: ICMP
- Probe Cycle Duration: 10 seconds
- Probe Count: 2
- Probe Path: Direct, Prisma SD-WAN VPN, Standard VPN
Default Service Probe for MS Teams ICMP Response
- Probe Name: MS Teams ICMP Response
- Intent: ICMP response for Microsoft Teams is used to measure the specific network conditions for Microsoft Teams across all paths. This probe should be used as an SLA input for Microsoft Teams traffic.
- FQDN/URL: teams.microsoft.com
- Protocol: ICMP
- Probe Cycle Duration: 10 seconds
- Probe Count: 2
- Probe Path: Direct, Prisma SD-WAN VPN, Standard VPN
Default Service Probe for Google G-suite ICMP Response
- Probe Name: Google G-Suite ICMP Response
- Intent: ICMP response for Google G-Suite is used to measure the specific network conditions for the Google Productivity suite across all paths. This probe should be used as an SLA input for Google traffic.
- FQDN / URL: apps.google.com
- Protocol: ICMP
- Probe Cycle Duration: 10 seconds
- Probe Count: 2
- Probe Path: Direct, Prisma SD-WAN VPN, Standard VPN