topic Re: PANOS SDWAN Monitoring in Advanced SD-WAN for NGFW Discussions

PANOS SDWAN Monitoring

E.Jarvi — Thu, 23 Jan 2025 20:46:43 GMT

In Panorama, Under the SD-WAN > Monitoring tabs. I am encountering an issue getting details on apps impacted by adverse network connections -

In the main pane I can see Hubs and Spokes listed and broken down by the count experiencing various conditions. Going further down the chain - I can see Apps counted under the "apps" and "Impacted Apps" Cells in the VPN Cluster > All Sites List.

However, When I attempt to drill down to a specific site, I have no information in the App Performance, and Link Performance.

In troubleshooting I've found references to these panes listing "no data" which would suggest a log forwarding issue - However based on the "All Sites" list showing that Impacted Apps are being tracked somewhere I have to assume I've missed a step somewhere.

Anyone run into anything similar with the PANOS SDWAN Plugin?

Re: PANOS SDWAN Monitoring

E.Jarvi — Thu, 23 Jan 2025 20:49:02 GMT

For reference - I am referring to the table displayed in step 4 of this guide (https://docs.paloaltonetworks.com/sd-wan/3-1/sd-wan-admin/troubleshooting/troubleshoot-app-performance) - When moving from step 3 to step 4, the tables are completely barren.

Re: PANOS SDWAN Monitoring

ashah1 — Thu, 23 Jan 2025 22:26:05 GMT

There could be several reasons, most common being Log forwarding not enabled on the security policy that is of interest here. It's generally recommended to enable log forwarding on all the security policies.
There could also be a bug - feel free to list your PAN-OS and Plugin combination and I can confirm if you are running into a bug. Of course, TAC will also have that info if you are able to open a TAC case and have them validate/create a bug ticket.