topic Re: Hit-Statistics per Security/NAT Policy in General Topics

Hit-Statistics per Security/NAT Policy

NOC-Alliade — Tue, 06 Nov 2012 10:17:20 GMT

Hi,

I would really like to see how often a security policy is hit. We came from Sonicwall to Palo alto, and this is one of the things i miss the most.

Maybe there's a CLI command for it ? I didn't find it so far.

Hope you can help me out.

Kind regards,

René Posthumus

mikand — Tue, 06 Nov 2012 10:42:36 GMT

I think contacting your sales engineer and propose this as a feature request is the thing you need to do.

A workaround is described in (using custom reports).

According to the CLI manual for PANOS 4.1 it seems that stuff like this is already being used internally:

set deviceconfig

...

> security-policy-limits — Security rule violation notification threshold (count 1-4294967295; time-

interval 30-86400). Security policy limits affect each individual rule in the security policy. If any

rule hits the specified count within the time-interval, an alarm is generated.

NOC-Alliade — Tue, 06 Nov 2012 10:47:54 GMT

Hi Mikand,

Thanx for the reply. I'll certainly will notify our sales engineer for this. I didn't believe that this feature wasn't part of the OS.

Kind regards,

René