https://live.paloaltonetworks.com/t5/prisma-access-discussions/about-activity-insights-office-users-and-other-hosts-counts/m-p/1223550#M1117 <P>The following document explains Insights &gt; Activity Insights &gt; Users &gt; Office Users and Other Users in Strata Cloud Manager.<BR />Please allow me to confirm a few things that were unclear about this section.</P> <P>&nbsp;</P> <P>[Activity Insights: Users]<BR /><A href="https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/activity-insights/activity-insights-users-scm" target="_blank" rel="nofollow noopener noreferrer">https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/activity-insights/activity-in...</A></P> <P>&nbsp;</P> <P>Question 1:<BR />Because it states that branch users are included in the "Office Users" category, I understand that users connected to a Remote Network are being counted.<BR />Will users who are determined to be internal by reverse DNS lookup performed when connecting to Global Protect also be counted in the "Office Users" section?</P> <P>&nbsp;</P> <P>Question 2:<BR />"Office Users" had a count of 0, and "Other Hosts" displayed the subnet used by the Remote Network IP address.<BR />I believe that "Other Hosts" does not display IP addresses used in remote networks, but are there any detailed counting criteria?<BR />(For example, a subnet obtained via BGP will be determined as Other, while a subnet configured statically will be determined as Office.)</P> Wed, 12 Mar 2025 09:35:32 GMT sawjain 2025-03-12T09:35:32Z https://live.paloaltonetworks.com/t5/prisma-access-discussions/about-activity-insights-office-users-and-other-hosts-counts/m-p/1223550#M1117 <P>The following document explains Insights &gt; Activity Insights &gt; Users &gt; Office Users and Other Users in Strata Cloud Manager.<BR />Please allow me to confirm a few things that were unclear about this section.</P> <P>&nbsp;</P> <P>[Activity Insights: Users]<BR /><A href="https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/activity-insights/activity-insights-users-scm" target="_blank" rel="nofollow noopener noreferrer">https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/activity-insights/activity-in...</A></P> <P>&nbsp;</P> <P>Question 1:<BR />Because it states that branch users are included in the "Office Users" category, I understand that users connected to a Remote Network are being counted.<BR />Will users who are determined to be internal by reverse DNS lookup performed when connecting to Global Protect also be counted in the "Office Users" section?</P> <P>&nbsp;</P> <P>Question 2:<BR />"Office Users" had a count of 0, and "Other Hosts" displayed the subnet used by the Remote Network IP address.<BR />I believe that "Other Hosts" does not display IP addresses used in remote networks, but are there any detailed counting criteria?<BR />(For example, a subnet obtained via BGP will be determined as Other, while a subnet configured statically will be determined as Office.)</P> Wed, 12 Mar 2025 09:35:32 GMT https://live.paloaltonetworks.com/t5/prisma-access-discussions/about-activity-insights-office-users-and-other-hosts-counts/m-p/1223550#M1117 sawjain 2025-03-12T09:35:32Z https://live.paloaltonetworks.com/t5/prisma-access-discussions/about-activity-insights-office-users-and-other-hosts-counts/m-p/1225608#M1126 <P>Question 1:<BR />Because it states that branch users are included in the "Office Users" category, I understand that users connected to a Remote Network are being counted.<BR />Will users who are determined to be internal by reverse DNS lookup performed when connecting to Global Protect also be counted in the "Office Users" section?</P> <P>Yes it should be counted.</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>Question 2:<BR />"Office Users" had a count of 0, and "Other Hosts" displayed the subnet used by the Remote Network IP address.<BR />I believe that "Other Hosts" does not display IP addresses used in remote networks, but are there any detailed counting criteria?<BR />(For example, a subnet obtained via BGP will be determined as Other, while a subnet configured statically will be determined as Office.)</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&gt;&gt;-Other hosts has&nbsp;<SPAN>two categories: internal and external hosts&nbsp;</SPAN></P> <P><SPAN>Internal hosts serve on-site users, such as guests or employees using their mobile phones in the office, and external hosts serve users, such as people visiting your enterprise website.</SPAN></P> <P>&nbsp;</P> <DIV class="p">The<SPAN>&nbsp;</SPAN><SPAN class="ph uicontrol">Other Hosts</SPAN><SPAN>&nbsp;</SPAN>table shows other hosts by IP address.</DIV> <UL id="concept-lvq_rms_rdc_ul-u2l_yms_rdc" class="ul"> <LI class="li"><SPAN class="ph uicontrol">User Devices</SPAN>—Number of devices associated with the user.</LI> <LI class="li"><SPAN class="ph uicontrol">Applications</SPAN>—Number of applications connected to the user.</LI> <LI class="li"><SPAN class="ph uicontrol">Threats</SPAN>—Threats information for the user.</LI> <LI class="li"><SPAN class="ph uicontrol">Data Usage</SPAN>—User's data usage.</LI> <LI class="li"><SPAN class="ph uicontrol">Last Activity Time</SPAN>—Date and time of the user's most recent activity.</LI> </UL> Thu, 03 Apr 2025 16:25:30 GMT https://live.paloaltonetworks.com/t5/prisma-access-discussions/about-activity-insights-office-users-and-other-hosts-counts/m-p/1225608#M1126 husingh 2025-04-03T16:25:30Z