About the External Probe Page

To access this page, select Secure Edge > Service Management > External Probe.

Use this page to configure probe settings to enable external probe for a site. The external probe is used by CPE to monitor the tunnel health status.

To configure the external probe settings:

1. Enable External Probe.

2. Enter the following configuration settings:

   • Destination address—Enter the destination IPv4 address or DNS server.

     By default, the destination IP address is 8.8.8.8 (Google Public DNS).

   • Source subnet—Enter the source IPv4 address subnet and mask.

     This feature supports all CPE devices with RPM-based ping capability, including the Junos OS and Mist/SSR devices. You can enable this feature for both IPsec and GRE tunnels. Be sure to select a large enough source subnet that can support all your CPE devices in your network.

3. Click Save.

   Probe settings are configured. A new shared address object with the name Secure-Edge-External-Probe-Source-Address is created automatically at Shared Services > Objects > Addresses. Also, a new security policy named Secure-Edge-External-Probe-Rule is created. You can enable external probes while creating a site at Secure Edge > Service Management > Sites.

To delete the configured probe setting, disable External Probe and click Yes to confirm the deletion. The probe setting is removed from the CPE configuration. Note that the deletion will remove external probes for all the sites.

Note:

If the external probe is associated with a site or security policy, a list of dependent sites and security policies is displayed. You must first disable External Probe in the Sites configuration settings and then delete the configured probe settings from the External Probe page.