Traceroute traversing ION are never visible

When running a traceroute that traverses a Prisma SD-Wan ION; any hop beyond the ION we receive a "request timed out". Is this expected behavior that we cannot fix? We have a number of tools that rely on traceroute for path visualization, and this ha

SASE API - SD-WAN

So I am playing with the API currently however, I am having an issue trying to find a call where i can specify a SiteID and retrieve all the current overlays on that site. The goal of course is to be able to add/remove overlays(auto VPN) to the sites

troubleshoot DC router

We have deployed Data Center (DC) routers at two distinct U.S. locations, each configured with multiple VRFs to support various service segments. The issue encountered is that despite no spoke sites being operational yet, the DC routers are already r

Setup involving Palo Alto SD-WAN and Cisco FlexConnect APs, understanding the tunnel MTU behaviour

We are currently planning a Cisco FlexConnect wireless AP setup with Palo Alto SD-WAN. as per various reference guides, we observed that when Windows performs certificate-based authentication, it sends large packets with an MTU of 1482 or more. Howev

Feature Request: Policy Rollback

I couldn't find anywhere if they have a feature request section.  I would like a feature that allows you rollback a policy if it goes wrong.  The current option is to clone a policy and apply the changes to the cloned policy.  While this is functiona

Prisma SDWAN ION monitoring

Hi,

We have deployed several branches, unfortunately monitoring the branch ION by snmp doesn't seem to work out. Response times of ION's on snmpwalk are high (up to 10sec). We were recommened to use api monitoring instead.

I've generated auth keys

With App Probes Disabled, ION still sending probes

On both IONs assigned to the site, I have disabled application reachability probes from the device "Basic Info" radio button.

• Confirmed via CLI probes are still being sent
• Traffic logs also confirm probes are being sent

Is there anything else need

Weak Path Affinity

We're looking at some interesting issues around app shift between our Prisma Access tunnel and local/DC breakout. Session starts as SSL, gets pushed over the PA tunnel, gets reidentified as an app that is set to breakout locally and the ION duly chan

Cisco 10G SFP+ DAC from ION 5200 to Nexus 9K

Hoping someone can help me understand whether using a Cisco 10G SFP+ DACs between an ION 5200 appliance and Nexus 9K switching can work.  Cisco SKU is SFP-H10GB-CU2M.  ION is recognizing the DAC at the ports, but not coming online.  Prisma SD-WAN 

Software Release Guidance for Prisma SDWan Ion Devices

To any of you using the Cloudgenix Ion devices, do you have any version upgrade recommendations or best practices?  Is anyone running 6.x successfully or are most staying with an older supported release like 5.6?

End-of-Life Summary - Palo Alto Net

How to check which IP is utilizing more bandwidth in SDWAN ION portal or strata portal?

Cloudgenix account locked

I am unable to login the cloudgenix portal.Below error for reference

Your account is locked for cloudgenix.com access. Please activate paloaltonetworks.com account through email and login through https://sase.paloaltonetworks.com/ portal

Palo alto sdwan dia Saas profile issue

Recently we have enabled SDWAN DIA setup in the firewall without the Panorama, all the routing and link switchover works fine as expected.

However we ran into the issue now, we have saas profile probing cisco.com using https when the cisco.com was no