Prisma SD-WAN DHCP option 242

Has anyone configured DHCP Option 242 on Prisma SD-WAN ION? I have a use case due to Avaya phones. I want to validate that I have the fields set correctly for the option to work correctly. The KB articles and documentation has not been much assistance. DHCP Option 242 Value = MCIPADD=x.x.x.x,HTTPSRVR=y.y.y.y

troubleshoot DC router

We have deployed Data Center (DC) routers at two distinct U.S. locations, each configured with multiple VRFs to support various service segments. The issue encountered is that despite no spoke sites being operational yet, the DC routers are already receiving route prefixes on one of the VRF and advertising them toward the LAN segment at DC. ...

Setup involving Palo Alto SD-WAN and Cisco FlexConnect APs, understanding the tunnel MTU behaviour

We are currently planning a Cisco FlexConnect wireless AP setup with Palo Alto SD-WAN. as per various reference guides, we observed that when Windows performs certificate-based authentication, it sends large packets with an MTU of 1482 or more. However, the Palo Alto sdwan tunnel size is set to 1432. This raises a concern: when EAP packets are...

Prisma SDWAN ION monitoring

Hi, We have deployed several branches, unfortunately monitoring the branch ION by snmp doesn't seem to work out. Response times of ION's on snmpwalk are high (up to 10sec). We were recommened to use api monitoring instead. I've generated auth keys etc and can querry SCM (api.strata.paloaltonetworks.com......). Unfortunately I cannot find any ...

With App Probes Disabled, ION still sending probes

On both IONs assigned to the site, I have disabled application reachability probes from the device "Basic Info" radio button. Confirmed via CLI probes are still being sent Traffic logs also confirm probes are being sent Is there anything else needed to fully disable the probes from being sent? Also is there anything to help understand th...

Cisco 10G SFP+ DAC from ION 5200 to Nexus 9K

Hoping someone can help me understand whether using a Cisco 10G SFP+ DACs between an ION 5200 appliance and Nexus 9K switching can work. Cisco SKU is SFP-H10GB-CU2M. ION is recognizing the DAC at the ports, but not coming online. Prisma SD-WAN

Software Release Guidance for Prisma SDWan Ion Devices

To any of you using the Cloudgenix Ion devices, do you have any version upgrade recommendations or best practices? Is anyone running 6.x successfully or are most staying with an older supported release like 5.6? End-of-Life Summary - Palo Alto Networks I had all our devices (Ion 3k,7k, 9ks) on 5.6.5-b15 which we didn't have too many problem...

How to check which IP is utilizing more bandwidth in SDWAN ION portal or strata portal?

Cloudgenix account locked

I am unable to login the cloudgenix portal.Below error for reference Your account is locked for cloudgenix.com access. Please activate paloaltonetworks.com account through email and login through https://sase.paloaltonetworks.com/ portal

Palo alto sdwan dia Saas profile issue

Recently we have enabled SDWAN DIA setup in the firewall without the Panorama, all the routing and link switchover works fine as expected. However we ran into the issue now, we have saas profile probing cisco.com using https when the cisco.com was not reachable via both the ISP the saas profile active monitor went down, since the site was tempor...

Prisma SDWAN Evaluation License

Hi Everyone, i hope you all doing well good well i Palo alto Customer portal Account my Company is partner of Palo alot. I have Evaluation Access i can get all product license but i am not seeing Prisma SDWAN how i can get free Prisma SDWAN License i have ION KVM Base image but it asking Key and ION Key, which i don't know from where i can ...

Welcome to the Prisma SD-WAN Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...