Customer Portal Overview

The Customer Portal in Contrail Service Orchestration (CSO) provides a Web-based UI that tenants of service providers (SPs) and operating companies (OpCos) can use to manage sites and devices, apply policies (firewall, NAT, SD-WAN, and so on), and perform administrative tasks. In Customer Portal, the objects that you manage and the actions that you perform are done in the context of a single tenant. Therefore, objects belonging to one tenant are isolated from objects belonging to other tenants.

Customer Portal supports role-based access control (RBAC), which means that the roles assigned to users determine their access privileges and the actions that they can perform. The following predefined roles are available in Customer Portal:

Tenant Admin
Tenant Operator

Administrator users have read access and write access to the Customer Portal UI and API capabilities, whereas operator users only have read access. Administrators can also create more users with specific roles and access privileges.

When you log in to Customer Portal, the main menu (left sidebar) that is displayed and the actions that you can perform depend on your access privileges. Table 1 displays the main menu available in the Customer Portal, a brief description of each menu item, and a link to the relevant topic in the Contrail Service Orchestration Customer Portal User Guide.

Table 2 lists the icons on the top right corner of the Customer Portal and a brief description of each icon.

Table 1: Customer Portal Main Menu
Main Menu	Description
Favorites	View the list of pages that you have marked as favorite. You can mark pages that you frequently visit to Favorites. To mark a page as favorites, click the star icon on the right corner of each page.
Dashboard	Access a user-configurable dashboard that you can customize with available widgets (also known as dashlets). For more information, see About the Customer Portal Dashboard.
Monitor	Monitor or view the following: Sites: See About the Monitor Overview Page. Alerts and alarms: See About the Generated Alerts Page and About the Alarms Page. Alert definitions and notifications: See About the Alert Definitions/Notifications Page. Link switchover events (for SD-WAN sites): See About the SD-WAN Events Page. Security events: See About the All Security Events Page. Application service-level agreement (SLA) performance (for SD-WAN sites):: See About the SLA Performance of a Single Tenant Page. Application visibility (for SD-WAN sites): See About the Application Visibility Page. User visibility: See About the User Visibility Page. Threat maps: See About the Threats Map (Live) Page. Jobs (ongoing or completed): See About the Jobs Page.
Resources	Manage the following resources: Sites: See About the Site Management Page. Devices: See About the Devices Page. Deploy or stage images: See About the Device Images Page. Site groups: See About the Site Groups Page. Mesh tags: See About the Mesh Tags Page. Site templates: See About the Configuration Templates Page. Device templates: See About the Device Template Page. Configuration templates: See About the Configuration Templates Page.
Configuration	Configure the following: Intent-based firewall policies: See About the Firewall Policy List Page. Content Security : See About the UTM Profiles Page. NAT policies: See About the NAT Policies Page. Intrusion prevention system (IPS): See About the IPS Signatures Page and About the IPS Profiles Page. SSL proxy: See About the SSL Proxy Policy Page. SD-WAN policies: See About the SD-WAN Policy Page. SLA-based and path-based steering profiles: See About the SLA-Based Steering Profiles Page and Adding Path-Based Steering Profiles. SD-WAN breakout profiles: See About the Breakout Profiles Page. Shared objects (for example, IP addresses): See About the Addresses Page. View and manage deployments: See About the Deployments Page. View network services: See About the Network Services Page.
Reports	Add and manage security and SD-WAN report definitions, and generate reports: See About the Security Report Definitions Page and About the SD-WAN Report Definitions Page. View generated security and SD-WAN reports: See About the Security Generated Reports Page and About the SD-WAN Generated Reports Page.
Administration	Perform various administrative tasks including the following: Manage users and roles: See About the Users Page in Customer Portal and About the Tenant Roles Page. Monitor audit logs: See About the Audit Logs Page. View device and CSO licenses: See About the Device Licenses Page and About the CSO Licenses Page. Modify tenant settings: See View and Edit Tenant Settings. Install signatures: See About the Signature Database Page. Manage certificates and VPN authentication: See About the Certificates Page and About the VPN Authentication Page. Set up and configure Juniper Identity Management Service (JIMS) See About the Identity Management Page. Integrate with Mist Access Points (APs): See Enabling Integration with Mist Access Points.

Table 2: Customer Portal Icons
Icons	Description
Running Jobs	Displays the list of jobs that are currently in progress. Click Review All to view the list of all jobs on the Jobs page. For more information on the Jobs page, see About the Jobs Page.
Scheduled Jobs	Displays the list of jobs that are scheduled. Click Review All to view the list of all scheduled jobs on the Jobs page. For more information on the Jobs page, see About the Jobs Page.
Scope	Displays the scope of a user. If you are an SP administrator or an OpCo administrator, you can change the scope from All Tenants to a specific tenant. For more information on switching the scope, see Switching the Tenant Scope.
Alarms and Alerts	Displays the following two tabs: Alarms—Displays the list of alarms that are generated by the device along with the timestamp and the severity of the alarm. Click Review All to view the details about the generated alarms on the Alarms page. For more information about the Alarms page, see About the Alarms Page. Alerts—Displays the list of alerts that are generated by the device along with the timestamp and the severity of the alert. Click Review All to view the details about the generated alerts on the Alerts page. For more information about the Alerts page, see About the Generated Alerts Page.
Pending Policies	Displays the list of policies that are due for deployment on the devices managed by CSO. Click Deploy to deploy the policy. The Deploy page appears. Choose the deployment type (Run Now or Schedule at a later time) and click OK. Click Review All to view the details about the pending deployments on the jobs page. See the Awaiting Deployment tab for the list of policies that are due for deployment.
Feedback	Click this icon to provide feedback about the product or report any issues that you are facing.
User Name	Displays the user name of the user who has currently logged into CSO.
Resize	Click this icon to resize the page to full screen.
Help Menu (?)	Click this icon to access the following panels and online help documentation: Getting Started panel What’s New panel Quick Help panel Help Center Release Notes About Panel

Customer Portal Overview

Related Documentation