topic Re: Traffic in interface tunnel in General Topics

Traffic in interface tunnel

soporteseguridad — Wed, 31 Jan 2018 16:01:03 GMT

Hi,

I have enabled QoS in order to limit a tunnel interface to maximum badwith to 50Mbps. QoS is well-applied but the current BW value is not being showed in QoS statistics. What ways are there to know the amount of traffic that goes in a moment through this tunnel to know if it exceeds 50MB??????? Except QoS statistics.....

Re: Traffic in interface tunnel

BPry — Wed, 31 Jan 2018 16:18:34 GMT

@soporteseguridad,

you can utilize the Pan(w)chrome extension to view the bitrate across different tunnel interfaces.

Re: Traffic in interface tunnel

jdprovine — Wed, 31 Jan 2018 16:27:37 GMT

@BPry

Are you referring to the google chrome splunk plug in?

Re: Traffic in interface tunnel

BPry — Wed, 31 Jan 2018 16:42:20 GMT

@jdprovine,

It's simply a Google Chrome plugin made by Luigi Mori ( PA Solutions Architect) that reads the information from the firewall. It provides a lot of imformation in an easy to read layout and some very simply graphs that can give a quick glance status of your firewall interfaces.

Pan(w)achrome

Re: Traffic in interface tunnel

jdprovine — Wed, 31 Jan 2018 16:44:36 GMT

@BPry

I have had it installed for sometime but I always thought it was from splunk 🙂

Re: Traffic in interface tunnel

OtakarKlier — Wed, 31 Jan 2018 18:04:54 GMT

Hello,

You should be able to see the statistics if you go to Network tab ->QoS, then click on the interface the traffic is flowing out of. This however only shows realtime data and not historical.

Other than that, a netflow server might be required or you can try the plugin that was suggested.

Regards,

Re: Traffic in interface tunnel

soporteseguridad — Thu, 01 Feb 2018 09:07:22 GMT

But how can configure this extension??? i have never heard of it. Where can i configure to monitorize PA traffic?? thanks

Re: Traffic in interface tunnel

soporteseguridad — Thu, 01 Feb 2018 09:08:44 GMT

I can NOT see the tunnel statistica in QoS statistics, i think its because the interface source is a loopback, not the physical interface. Itss a bit tricky the config.

Re: Traffic in interface tunnel

BPry — Thu, 01 Feb 2018 12:47:22 GMT

1) Install the extension within Chrome by visiting the Link I provided.

2) Log into the firewall in question, upon prompt about adding it to Pan(w)achrome hit yes.

3) Click on the extension and select the firewall that you would like to view stats for.