Prisma SD-WAN Discussions

Weak Path Affinity

We're looking at some interesting issues around app shift between our Prisma Access tunnel and local/DC breakout. Session starts as SSL, gets pushed over the PA tunnel, gets reidentified as an app that is set to breakout locally and the ION duly chan

SASE API - SD-WAN

So I am playing with the API currently however, I am having an issue trying to find a call where i can specify a SiteID and retrieve all the current overlays on that site. The goal of course is to be able to add/remove overlays(auto VPN) to the sites

Feature Request: Policy Rollback

I couldn't find anywhere if they have a feature request section.  I would like a feature that allows you rollback a policy if it goes wrong.  The current option is to clone a policy and apply the changes to the cloned policy.  While this is functiona

DHCP Scope Mapping to Subinterfaces in Prisma SD-WAN (ION Device)

Hi Community,

I’ve configured two DHCP scopes with different IP subnets under the Branch Site configuration in Prisma SD-WAN. On the corresponding ION device, I’ve also created two subinterfaces, each intended for a different VLAN and subnet.

I wou

Traceroute traversing ION are never visible

When running a traceroute that traverses a Prisma SD-Wan ION; any hop beyond the ION we receive a "request timed out". Is this expected behavior that we cannot fix? We have a number of tools that rely on traceroute for path visualization, and this ha

Prisma SD-WAN DHCP option 242

Has anyone configured DHCP Option 242 on Prisma SD-WAN ION? I have a use case due to Avaya phones. I want to validate that I have the fields set correctly for the option to work correctly. The KB articles and documentation has not been much assistanc

troubleshoot DC router

We have deployed Data Center (DC) routers at two distinct U.S. locations, each configured with multiple VRFs to support various service segments. The issue encountered is that despite no spoke sites being operational yet, the DC routers are already r

Setup involving Palo Alto SD-WAN and Cisco FlexConnect APs, understanding the tunnel MTU behaviour

We are currently planning a Cisco FlexConnect wireless AP setup with Palo Alto SD-WAN. as per various reference guides, we observed that when Windows performs certificate-based authentication, it sends large packets with an MTU of 1482 or more. Howev

Prisma SDWAN ION monitoring

Hi,

We have deployed several branches, unfortunately monitoring the branch ION by snmp doesn't seem to work out. Response times of ION's on snmpwalk are high (up to 10sec). We were recommened to use api monitoring instead.

I've generated auth keys

With App Probes Disabled, ION still sending probes

On both IONs assigned to the site, I have disabled application reachability probes from the device "Basic Info" radio button.

• Confirmed via CLI probes are still being sent
• Traffic logs also confirm probes are being sent

Is there anything else need

Cisco 10G SFP+ DAC from ION 5200 to Nexus 9K

Hoping someone can help me understand whether using a Cisco 10G SFP+ DACs between an ION 5200 appliance and Nexus 9K switching can work.  Cisco SKU is SFP-H10GB-CU2M.  ION is recognizing the DAC at the ports, but not coming online.  Prisma SD-WAN 

Software Release Guidance for Prisma SDWan Ion Devices

To any of you using the Cloudgenix Ion devices, do you have any version upgrade recommendations or best practices?  Is anyone running 6.x successfully or are most staying with an older supported release like 5.6?

End-of-Life Summary - Palo Alto Net

How to check which IP is utilizing more bandwidth in SDWAN ION portal or strata portal?