topic NGFW Threat & Traffics Log Fields in Next-Generation Firewall Discussions

NGFW Threat & Traffics Log Fields

SwapnilC_Lentra — Fri, 12 Apr 2024 08:40:45 GMT

Hi Team,

I am going through the traffic and threat logs of the NGFW. In the logs, I am unable to get the knowledge of the following fields " domain" & "config version".

Re: NGFW Threat & Traffics Log Fields

PavelK — Mon, 15 Apr 2024 03:14:14 GMT

Hello @SwapnilC_Lentra

thanks for post.

would it be possible to post a screen shot of fields you are referring to?

Kind Regards

Pavel

Re: NGFW Threat & Traffics Log Fields

SwapnilC_Lentra — Wed, 17 Apr 2024 08:16:28 GMT

Actually I do not have access to the firewall console. I just have raw logs on excel where I got these fields.

Re: NGFW Threat & Traffics Log Fields

PavelK — Wed, 17 Apr 2024 23:08:09 GMT

Hello @SwapnilC_Lentra

thank you for reply.

I see. Could you please confirm the source of the raw logs? Was it exported directly from Firewall / Panorama or SIEM? Also, if possible could you post samples of what information these fields represent?

Thank you

Pavel