topic Re: VM Palo : Unable to see any traffic in traffic log under the monitoring Tab in General Topics

VM Palo : Unable to see any traffic in traffic log under the monitoring Tab

imranshahid — Mon, 07 Aug 2017 09:22:20 GMT

Hi All,

I have setup a VM palo on ESXi as home lab, but i can not see anything coming up under the monitoring traffic log. I tried to change the default behavior of the implicit security policy rules at the bottom to log at both start and end but still no joy.

I can see the system logs but not traffic logs. Any suggestions, please most welcome.

Thanks in advance

Imran (Brighton)

Re: VM Palo : Unable to see any traffic in traffic log under the monitoring Tab

TranceforLife — Mon, 07 Aug 2017 09:46:43 GMT

Is it licensed VM? If it is not then no logs will be visible under the monitoring tab. The workaround is:

1) Apply the licenses 😄

2) Create a Syslog server profile and attach to the policy. Set up tftp32 ( or any other syslog server) so you can see at least some, not as pretty as from the monitoring tab, traffic logs.

Re: VM Palo : Unable to see any traffic in traffic log under the monitoring Tab

imranshahid — Mon, 07 Aug 2017 11:18:55 GMT

hi ,

Thanks for the reply. I can see the system logs but can not see the traffic logs.

So you mean to say if the VM is not licensed, it wont tell you anything about the traffic logs.?

Thanks in advance

Re: VM Palo : Unable to see any traffic in traffic log under the monitoring Tab

TranceforLife — Mon, 07 Aug 2017 11:22:41 GMT

@imranshahid exactly. Just try to attach a syslog profile (it will also include traffic logs):

https://live.paloaltonetworks.com/t5/Featured-Articles/Tips-amp-Tricks-Forward-traffic-logs-to-a-syslog-server/ta-p/71966

Kindly Ask PA Sales Team for the trial licences.