Baseline Your Prisma Access Hub Application and Link Performance
Table of Contents
3.1
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
- Configure Advanced Routing for SD-WAN
Baseline Your Prisma Access Hub Application and Link Performance
Baseline your Prisma Access Hub application and link performance before configuring
SD-WAN link management profiles.
Before you Configure SD-WAN Link Management Profiles, Palo Alto Networks recommends you
baseline your Prisma Access Hub application and link performance to better
understand the normal payload activity for your Prisma Access Hub to avoid
unnecessary link swapping for applications and traffic that do not require it.
- Log in to the Panorama Web Interface.Onboard PAN-OS Firewalls to Prisma Access.Select PanoramaSD-WANMonitoring and modify the SD-WAN monitoring time range.The longer the time frame you use to baseline your Prisma Access Hub app and link performance, the more accurate the baseline will be. At a minimum, use three days worth of app and link performance to baseline the latency, jitter, and packet loss data you use to create your SD-WAN link management profiles.Palo Alto Networks recommends assessing seven days of app and link performance data to baseline the latency, jitter, and packet loss for the Prisma Access Hub.Filter the SD-WAN monitoring to display only your Prisma Access Hub-Spoke VPN clusters.
- Click an App Performance or Link Performance summary that indicates Impacted, Error, or Warning counts to view a detailed list of sites and their status based on latency, jitter, and packet loss.In the VPN Cluster filter, select Prisma Access Hub-Spoke.Click a Site to view in-depth hsealth details for the Prisma Access Hub.Review the link characteristics for a Prisma Access Hub application.
- Click an application in the App Performance section to view the Traffic Characteristics and the links used for the applications traffic.Click each Link to view the baseline latency, jitter, and packet loss measured for the application across the link.Repeat this for all links until you gather sufficient baseline data to modify your Prisma Access Hub path quality profile.Modify your Prisma Access Hub Path Quality profile based on the latency, jitter, and packet loss baselines you gathered.Continue configuring SD-WAN as needed.Monitor Prisma Access Hub Application and Link Performance to further fine-tune your SD-WAN link management profiles.