NAPT
All scripts
sase
Advanced
2–8 min

Prisma Access Tunnel Health Monitor

Prisma Access API: service-connection tunnel state, PoP latency trends, mobile-user session count, certificate expiry, policy push status and Slack alerting on tunnel down.

Palo Alto Prisma Access
Open in GeneratorOpen in Platform
You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Sign in free to access

Already have access? Sign in →

Capabilities

  • Prisma Access API
  • Service-connection tunnel state
  • PoP latency trends
  • Mobile-user session count
  • Certificate expiry
  • Policy push status
  • Slack alerts

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

ParameterTypeDefaultNotes
PoP latency alert (ms)
latency_alert_ms
number120—
Cert expiry warning (days)
cert_warn_days
number30—
Slack webhook
slack_webhook
string——

Hint 1 — Name your vendors and OS versions

Mention the exact platforms you run (Palo Alto Prisma Access) so the generated sase logic uses the right CLI/NETCONF syntax.

Hint 2 — State your real thresholds

Provide concrete values for PoP latency alert (ms), Cert expiry warning (days), Slack webhook instead of the defaults — they shape what counts as a fault.

Hint 3 — Prioritize the checks you need

This tool can prisma Access API and service-connection tunnel state. Ask for the subset relevant to your incident to keep output focused.

Hint 4 — Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal
[2026-06-12] INFO  Prisma Access: checking service connections + PoPs...
SC/POP            STATE    LATENCY  CERT-EXP   STATUS
SC-Mumbai         up       18ms     412d       OK
SC-Singapore      down     -        88d        TUNNEL-DOWN ←
PoP-Frankfurt     up       138ms    210d       LATENCY ←
[ALERT→Slack] SC-Singapore tunnel down
Summary: 1 down · 1 high-latency