SevOne

SevOne

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Monitoring Palo Alto Prisma SD-WAN deployments with IBM SevOne 

Mon June 23, 2025 05:07 AM

Looking to monitor your Prisma SD-WAN deployment with IBM SevOne?

Good news: It is incredibly simple, with no custom development or manual configuration required. You will be up and running in just a few minutes. Here’s how.

But first, let’s take a quick look under the hood.  

Figure 1: IBM SevOne and Prisma SD-WAN integration high-level architecture

As part of the integration, we are introducing hybrid data collection using both SNMP and APIs. IBM SevOne 8.0 will support onboarding of ION devices into SevOne, with monitoring through SNMP and the collection of essential metadata attributes via Prisma SD-WAN APIs.

In the 8.1 releases, we have expanded the Prisma SD-WAN plugin's capabilities beyond SNMP by introducing API based collection of Prisma circuit statistics. Through this enhancement, SevOne now provides more granular insights directly from the Prisma SD-WAN orchestrator, giving operations teams a richer, end-to-end view of their SD-WAN performance.

In addition, we now natively translate Prisma SD-WAN flows by translating the enterprise fields and providing insights into how the applications are being treated - offering deeper visibility into QoS, application IDs and other key attributes.

All of this will be available in SevOne 8.1 release, which will go GA with the Prisma SD-WAN integration on December 11, 2025!

How to set it up: Add Your Prisma SD-WAN Credentials

To begin, just enter the credentials that are available from your Palo Alto Networks service account and the SNMP credentials.

Figure 2: Onboarding of the Prisma SD-WAN ION devices

Automatic Device Discovery

Once you have entered the credentials, the plugin immediately reaches out to the Prisma SD-WAN orchestrator to start discovering your network devices.

In just 2–3 minutes, all eligible ION devices are automatically pulled into the SevOne NMS. No manual device entry. No delay.

After the devices are onboarded, head straight to the Data Insight (DI) reports in SevOne. Here you will find:

  • A unified view of your Prisma SD-WAN deployment
  • Device health metrics
  • Interface and tunnel performance
  • Circuit statistics 
  • Flow-based visibility, deeper visibility into QoS including top applications and high-traffic sources

With SevOne's robust reporting engine, you can create reports that can help your network engineering /network operations teams catch issues/outages faster. Below, you can see snapshots of a few reports we have created with Prisma ION devices

Figure 3: Alerts and the device inventory of the Prisma ION devices.

Figure 4: Top-N report showing the most utilized / discarding interfaces.

Figure 5: Top-N report showing the circuit statistics (circuit health score).

Figure 6: Top-N report showing the circuit statistics (circuit bandwidth utilization).

Figure 7: Circuit summary dashboard showing detailed statistics for each circuit.

Figure 8: Sankey view showing source and destination IPs along with the top applications categorized by QoS.

Figure 8: Sankey view showing source and destination IPs on each end with the CDNs that are processing the traffic along with the application details.

Behind the Scenes: How SevOne validates and collects data

To ensure we are monitoring the correct interfaces, here’s what happens automatically:

  1. API Integration: SevOne uses Prisma SD-WAN APIs to pull device inventory, interface IP's and circuit statistics
  2. Reachability Check: Each IP is tested to make sure it is routable and reachable from the collector using basic connectivity test
  3. SNMP Validation: For each reachable IP, we perform an SNMP walk to:
    • Validate SNMP configuration ( community string, version, etc.)
    • Retrieve relevant SNMP metrics and OIDs for ingestion into SevOne

     4.  IPFIX collection: SevOne collects flow-level data via IPFIX, providing detailed visibility into application traffic and QoS applications.

That’s It — Monitoring Simplified

From setup to insights, this integration is designed to make Prisma SD-WAN monitoring easy, fast, and effective - no scripts, no manual configs, no hassle.

Ready to see it in action? If you are looking to get comprehensive performance insights into your entire Prisma SD-WAN deployment, please reach out to our sales teams for a demo

Watch Video for more insights - https://youtu.be/COHf4DITbFg?si=pX7nZxGUL07XBdTM


#Release
#TechnicalBlog
#ProductUpdates/Announcements
#Documentation

Statistics
0 Favorited
52 Views
1 Files
0 Shares
1 Downloads