Cutom reports IPs not domains names

MRamadanAHafiez — Wed, 13 Mar 2024 08:37:09 GMT

Hello Bro,

We are currently on PANOS ver 10.2.7-h3 on PA-3220 firewall.

I have created a custom report, and receive it daily, it went Ok.

but the received PDF report for example "Top blocked websites" mostly include IP addresses and not the blockewd domain names which makes it almost useless.

how to let the firewall create the report contents by target domain names and not the IP addresses.

"image linked"

TIA

Re: Cutom reports IPs not domains names

BPry — Wed, 13 Mar 2024 13:23:25 GMT

@MRamadanAHafiez,

You're just looking at blocked destination addresses, which the firewall will attempt to resolve in the report which is what you appear to be misinterpreting as the domain. You'll want to build a report that actually looks at the URL logs with the URL column actually being utilized. Play around with that and see if that gets you closer to what you actually want to utilize.

I'll caution that if you're just looking to get the domains that you've blocked access to, the firewall can't directly built that sort of report. It will look at each full EURL that it recorded instead of just the domain. If you want to do that detailed of a report, you'll have to offload the data and process the report through something a bit more advanced in capability.

topic Re: Cutom reports IPs not domains names in General Topics

Cutom reports IPs not domains names

Re: Cutom reports IPs not domains names