topic Re: Best way to check firewall utilization? in General Topics

Best way to check firewall utilization?

Phil_Geho — Wed, 09 Aug 2017 17:15:31 GMT

Using Panorama, what is the best way to check and monitor firewall utilization?

Re: Best way to check firewall utilization?

Raido_Rattameister — Wed, 09 Aug 2017 18:02:54 GMT

First step is ACC that gives high level overview of sessions, amount of traffic etc.

You can always attach QoS profile to egress interface to get real time graph and app utilization.

Or install pan(w)achrome plugin into chrome to get utilization of physical and virtual interfaces, dataplane utilization etc.

If this is not enough then next step is cli deepdive 🙂

Re: Best way to check firewall utilization?

Remo — Wed, 09 Aug 2017 18:30:51 GMT

Another easy way to monitor the firewall utilization is SNMP. With an SNMP monitor software you will also be able to store the utilization to get historical views. A few examples for SNMP monitoring:

Dataplane CPU utilization
Active sessions (TCP/UDP/icmp) and session utilization
Decrypted sessions and utilization
Actual traffic for every physical or logical interface
...

When you have deployed panorama in panorama mode:

Panorama CPU utilization
Storage capacity
Global Log rate
Log rate per firewall
...

In panorama the best way is as already described by @Raido_Rattameister with the ACC tab to get a view for the sessions.