Baseline Your Prisma Access Hub Application and Link Performance
Table of Contents
3.2 & Later
Expand all | Collapse all
-
- Create a Link Tag
- Configure an SD-WAN Interface Profile
- Configure a Physical Ethernet Interface for SD-WAN
- Configure an Aggregate Ethernet Interface and Subinterfaces for SD-WAN
- Configure Layer 3 Subinterfaces for SD-WAN
- Configure a Virtual SD-WAN Interface
- Create a Default Route to the SD-WAN Interface
-
- Create a Path Quality Profile
-
- Create a SaaS Quality Profile
- Use Case: Configure SaaS Monitoring for a Branch Firewall
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to the Same SaaS Application Destination
- Use Case: Configure a Hub Firewall Failover for SaaS Monitoring from a Branch Firewall to a Different SaaS Application Destination
- SD-WAN Traffic Distribution Profiles
- Create a Traffic Distribution Profile
- Create an Error Correction Profile
- Configure an SD-WAN Policy Rule
- Allow Direct Internet Access Traffic Failover to MPLS Link
- Configure DIA AnyPath
- Distribute Unmatched Sessions
- Configure Multiple Virtual Routers on SD-WAN Hub
- Configure Multiple Virtual Routers on SD-WAN Branch
- Configure HA Devices for SD-WAN
- Create a VPN Cluster
- Create a Full Mesh VPN Cluster with DDNS Service
- Create a Static Route for SD-WAN
- Configure Advanced Routing for SD-WAN
Baseline Your Prisma Access Hub Application and Link Performance
Baseline your Prisma Access Hub application and link
performance before configuring SD-WAN link management profiles.
Before you Configure SD-WAN Link Management Profiles, Palo Alto Networks
recommends you baseline your Prisma Access Hub application and link
performance to better understand the normal payload activity for
your Prisma Access Hub to avoid unnecessary link swapping for applications
and traffic that do not require it.
- Log in to the Panorama Web Interface.Onboard PAN-OS Firewalls to Prisma Access.Select PanoramaSD-WANMonitoring and modify the SD-WAN monitoring time range.The longer the time frame you use to baseline your Prisma Access Hub app and link performance, the more accurate the baseline will be. At a minimum, use three days worth of app and link performance to baseline the latency, jitter, and packet loss data you use to create your SD-WAN link management profiles.Palo Alto Networks recommends assessing seven days of app and link performance data to baseline the latency, jitter, and packet loss for the Prisma Access Hub.Filter the SD-WAN monitoring to display only your Prisma Access Hub-Spoke VPN clusters.
- Click an App Performance or Link Performance summary that indicates Impacted, Error, or Warning counts to view a detailed list of sites and their status based on latency, jitter, and packet loss.In the VPN Cluster filter, select Prisma Access Hub-Spoke.Click a Site to view in-depth health details for the Prisma Access Hub.Review the link characteristics for a Prisma Access Hub application.
- Click an application in the App Performance section to view the Traffic Characteristics and the links used for the applications traffic.Click each Link to view the baseline latency, jitter, and packet loss measured for the application across the link.Repeat this for all links until you gather sufficient baseline data to modify your Prisma Access Hub path quality profile.Modify your Prisma Access Hub Path Quality profile based on the latency, jitter, and packet loss baselines you gathered.Continue configuring SD-WAN as needed.Monitor Prisma Access Hub Application and Link Performance to further fine-tune your SD-WAN link management profiles.