topic Path Monitoring - latency in Next-Generation Firewall Discussions

Path Monitoring - latency

jonathanb — Mon, 17 Apr 2023 18:51:10 GMT

I'm not using PAN SD-WAN.

I have static route path monitoring configured for multiple ISPs. If pings fail, the path goes down as expected.

If the pings succeed, but latency is abnormally high, the path stays up.

How can I set a latency threshold? Ideally, I'd have a threshold for each monitored path such as 10ms for the next hop and 200ms for a host that's outside if the ISP's network.

This would help automatically fail a route that isn't really working correctly.

Re: Path Monitoring - latency

Y-alwaysMe — Sun, 23 Apr 2023 11:16:02 GMT

Hi Jonathanb,

To my knowledge you cannot configure latency threshold on a) static route monitoring, b) BFD monitoring, c) PBF rule with Monitor profile.

All of the 3 above options monitor failures and not quality of the link/path.

In your scenario there are other options that might suit your needs. consider these two options below.

1) QoS and assign different application different priorities.

2) ECMP load balance the traffic between multiple ISP and if required assign weights to each specific ISP link.