topic Re: PANOS Secure SDWAN Realtime Metrics in Panorama Discussions

PANOS Secure SDWAN Realtime Metrics

DanaHawkins — Wed, 23 Feb 2022 16:19:53 GMT

I'm doing a Secure SDWAN PoC with a customer this month and they asked if Panorama offered the ability to pull/poll realtime metrics related to SDWAN performance. My first thought is you can pull standard SNMP metrics from any interface including the SDWAN interface. My second thought was using Netflow.

But my question would be surrounding pulling SDWAN specific metrics let's say from the Path Monitoring profile.

Currently, the customer's MPLS provider gives them statics like Jitter, Latency, etc.., and they would like to do more of an apples-to-apples comparison.

The data I need is in the SDWAN plugin itself and is available for export to a report. Just wondering if there are any other ways to get that data out of Panorama that's more "live".

Thanks in advance for your thoughts and assistance..

Re: PANOS Secure SDWAN Realtime Metrics

Grady — Fri, 16 Jun 2023 08:54:52 GMT

I have the same confusion, but I don't think Paloalto currently has any SNMP interface for SDWAN to get real-time SLA values

Re: PANOS Secure SDWAN Realtime Metrics

delliott_6784 — Fri, 16 Jun 2023 11:55:26 GMT

Would a SDWAN report provide the metrics required by the client?

https://docs.paloaltonetworks.com/sd-wan/3-1/sd-wan-admin/monitoring-and-reporting/generate-an-sd-wan-report#id4580ddd7-7f2d-41e4-8355-4063f027aabd

Also, is the POC licensed for ADEM?

Re: PANOS Secure SDWAN Realtime Metrics

ozheng — Sun, 23 Jul 2023 11:48:22 GMT

Hello @DanaHawkins ,

In the SDWAN plugin, you have the reporting options which gives "near real time" info.
If you want more real time data, you can use the XMLAPI to get the real time statistics on all the firewalls (but that will require someone who can write some code).

Also, it may be tough to do a "apple-to-apple" comparison :

MPLS is a more a guaranteed but expensive for multipoint VPN (not really private unless you are having some GET VPN).

PAN-OS Secure SDWAN is a secure (fabric of IPSec tunnels) where you forward application based on your parameters (best link / priority..).

Hope that helps.

Olivier