How do you enable the Network Insight for Palo Alto Site-to-Site VPNs and GlobalProtect VPN sub views?

How do you enable the Network Insight for Palo Alto Site-to-Site VPNs and GlobalProtect VPN sub views?

• A. Enable polling of Palo Alto devices monitored in NPM via the Palo Alto REST API
• B. Install a Palo Alto agent on each device
• C. Enable SNMP polling for Palo Alto devices
• D. Import Palo Alto configuration data into NPM

Answer: (A)

The capability to view Site-to-Site VPNs and GlobalProtect VPN sub-views in Network Insight for Palo Alto hinges on pulling data from the device through the Palo Alto REST API. When you enable polling of Palo Alto devices via the REST API in NPM, the collector retrieves VPN-specific telemetry such as tunnel status, active sessions, and tunnel health. This data is what populates the VPN sub-views, giving you detailed visibility into each VPN tunnel and its current state. Other approaches don’t provide the same live VPN detail. An agent is not how Palo Alto devices are polled in NPM, since these devices are managed over API or SNMP rather than by a traditional endpoint agent. SNMP polling alone can surface some metrics, but the VPN sub-views rely on the richer, device-specific data exposed by the REST API. Importing configuration data would bring in static settings but not the real-time VPN status and activity that these sub-views display.

The capability to view Site-to-Site VPNs and GlobalProtect VPN sub-views in Network Insight for Palo Alto hinges on pulling data from the device through the Palo Alto REST API. When you enable polling of Palo Alto devices via the REST API in NPM, the collector retrieves VPN-specific telemetry such as tunnel status, active sessions, and tunnel health. This data is what populates the VPN sub-views, giving you detailed visibility into each VPN tunnel and its current state.

Other approaches don’t provide the same live VPN detail. An agent is not how Palo Alto devices are polled in NPM, since these devices are managed over API or SNMP rather than by a traditional endpoint agent. SNMP polling alone can surface some metrics, but the VPN sub-views rely on the richer, device-specific data exposed by the REST API. Importing configuration data would bring in static settings but not the real-time VPN status and activity that these sub-views display.