Cisco Catalyst SD-WAN AppQoE Configuration Guide, Release 26.x and Later

PDF

Cisco Catalyst SD-WAN AppQoE Configuration Guide, Release 26.x and Later

Monitor SSL proxy traffic

Updated: March 10, 2026

Want to summarize with AI?

Log in

Verify SSL Proxy traffic monitoring using On-Demand Troubleshooting. Configure time synchronization and enable SSL Proxy visibility to access device dashboards, apply filters, and view charts or tables for analysis.

Use On-Demand Troubleshooting to observe SSL Proxy traffic metrics and analyze device behavior for visibility and troubleshooting.

You can monitor the traffic optimized by SSL Proxy using Cisco SD-WAN Manager.

From Cisco vManage Release 20.9.x, you can use On-Demand Troubleshooting to monitor traffic optimized by SSL Proxy.

Before you begin

To view the AppQoE data on Cisco SD-WAN Manager, ensure that you:

  • Synchronize the controller and device time by configuring Network Time Protocol (NTP). You can also set the clock manually using the clock set command.

  • Add the policy ip visibility features sslproxy enable command to the device configuration:

Follow these steps to monitor SSL Proxy traffic:

Procedure

  1. From the Cisco SD-WAN Manager menu, choose Tools > On Demand Troubleshooting.

  2. Enable On-demand Troubleshooting to view the dashboards.

    The dashboard screens do not display real-time information.

    You can also retrieve the DPI statistics by selecting the device from the drop-down menu and choosing the Data Type as DPI.

  3. From the Cisco SD-WAN Manager menu, choose Monitor > Devices.

    Cisco vManage Release 20.6.1 and earlier releases: From the Cisco SD-WAN Manager menu, choose Monitor > Network.

  4. Click the hostname of the device you want to monitor.

  5. Under On-Demand Troubleshooting, choose SSL Proxy.

  6. Enable On-Demand Troubleshooting to view details of the selected device.

  7. Choose Traffic View type from the drop-down menu to view data in graph or tabular format.

    You can also click Filter to choose by VPN, local or remote TLOC, traffic source and more.

    The monitoring data for your selected device displays in the form of a chart, followed by a table. You can view the data in form of a graph or bar chart by toggling between the two options.

    You can filter the data for a specified time range: (1h, 3h, 6h, and so on), or click Custom to define a time range.

SSL Proxy traffic data displays on device dashboards in graphs and tables. You can apply filters and time ranges, including using Custom, to refine the view. Dashboards do not display real-time information.