Prisma SD-WAN Discussions
Discuss Prisma SD-WAN, Palo Alto Networks cloud-delivered service that implements app-defined, autonomous SD-WAN to help you secure and connect your branch offices, data centers and large campus sites without increasing cost and complexity.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Prisma SD-WAN Discussions
Discuss Prisma SD-WAN, Palo Alto Networks cloud-delivered service that implements app-defined, autonomous SD-WAN to help you secure and connect your branch offices, data centers and large campus sites without increasing cost and complexity.
About Prisma SD-WAN Discussions
Discuss Prisma SD-WAN, Palo Alto Networks cloud-delivered service that implements app-defined, autonomous SD-WAN to help you secure and connect your branch offices, data centers and large campus sites without increasing cost and complexity.

Discussions

Welcome to the Prisma SD-WAN Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4050 Views
  • 0 replies
  • 0 Likes

DHCP IP Lease Log required on SD-WAN

Hi, Everyone. I'm new to Prisma SD-WAN. We are using Prisma SD-WAN DHCP server. I want to get DHCP IP Lease information like ip address, mac-address information. And ION CLI does support inspect dhcplease, it means SD-WAN supports IP Lease information. But I want to get the information by syslog which is realtime. Is it supports? Thank you.

Jacki72 by L0 Member
  • 968 Views
  • 0 replies
  • 0 Likes

Resolved! IPsec tunnel to Prisma Access down

I have 2 sites, each with a virtual ION. Each has 2 WAN interfaces, behind NAT, and a pair of tunnels to Prisma Access. Site1 is fine and both tunnels are up. Site 2 was fine but at some point one of the tunnels went down. I cannot figure out what could be the issue as their appears to be limited logging or IKE/IPsec debugging. I can see the f...

BBartik by L2 Linker
  • 2881 Views
  • 1 replies
  • 0 Likes

Prisma SD-WAN initial deployment - LAN port

Hello All, Looking for some feedback on how to best configure our ION devices. We have setup HA ION devices with redundant Internet and Private circuits. The issue I keep running into is the LAN port configuration doesn't seem right. I setup a test machine and set a default route to the LAN port of the ION device so traffic passes throu...

ION1200-s routing between SVI

I am unable to route between SVIs configured on an ION-1200s. Is there something that we're missing with configuration? Can ping within SVI (device on SVI subnet can ping its GW) Can ping SVI GW to SVI GW Device on one SVI cannot ping GW of another SVI Can ping Internet from the Internet interface SVI cannot ping out to the Internet L3 LAN f...

StaceyL by L0 Member
  • 2018 Views
  • 1 replies
  • 0 Likes

Local Internet Breakout

Hi All I urgently need some Help Currently we have Palo Alto SDWAN Setup using Pair of ION2000 and Pair of ION9000 set up at various Branches, using DIA and MPLS Networks. I would like to setup so that Branch Users and certain Cloud application can Break out Locally can have Local Internet access - today configuration Internet access is via...

Prisma SD-WAN - ION HA or Cold Spare?

Looking at what others are doing for Prisma SD-WAN branch redundancy. We've narrowed it down to setting up IONs in HA or leaving a cold spare ION on site for disaster recovery. HA requires double licensing, which is pricey. Cold spare IONs don't require active licenses but the sites will experience longer downtime. IONs are easy enough to reconf...

Prisma SD-WAN static route redistribution to BGP

Hello all, We have multiple vIONs (in DC mode) interconnecting our AWS clouds with our Prisma SD-WAN environment, via the AWS TGW CloudBlade integration. Also, we're using the vIONs to terminate some 3rd party VPNs. The VPN routes, if learned via BGP, are redistributed to other BGP peers with no problem. However, static route redistribution ...

PAN-OS SDWAN routing

Greetings, I’m struggling to find the most elegant solution to turning up SDWAN in a large BGP environment. I have a MPLS mesh with two hubs where I’m attempting to add path resiliency via distributed DIA circuits. Sounds simple, BUT the MPLS cloud is connected with multiple 3rd party organizations’ connections with over 400 advertised netwo...

Tremelai by L1 Bithead
  • 2791 Views
  • 2 replies
  • 0 Likes

Prisma sd-wan inter DC communication

Hello, I am looking for any reference or guide how to configure (if it is possible) communication between Prisma SD-WAN DCs. As Prisma SD-SDWAN is establishing IPSec tunnels only between Branch and DC is there any way to establish communication between DCs? I think there might be some workaround but not sure if officially supported by Palo Alto ...

adam.t by L0 Member
  • 2470 Views
  • 1 replies
  • 2 Likes

ION 2000 Device recommended software version

Hy Team, We have few ION 2000 Devices running on 6.0.1-b42, and wanted to know what is the latest stable recommended version for this ION model. Also, where can we check the criticality of the current version of the ION. I have been looking into the documentation, couldn't find any. Thanks in advance. Regards, Sheik

[Issue] Automated Upgrade using prisma_sase sdk

I'm attempting to develop an automated script utilizing the Prisma_SASE SDK library for upgrading a group of devices. Unfortunately, I encountered a 400 Bad Request issue when using the `put.software` endpoint. Here's the request body: {"upgrade_version": "5.6.13-b3"} I've already made other API calls and confirmed that there are no authenticati...

Api calls to ion 1200 FW

Hello, I am trying to make API calls to a prisma FW to get details about a ion 1200 we have as a device at a site. Im not certain how this works. We have a number of sites that have devices(ion 1200 routers). How would I go about making an api call to retrieve info about a device at a site?

T.Colvin by L1 Bithead
  • 1330 Views
  • 0 replies
  • 0 Likes
  • 124 Posts
  • 48 Subscriptions