topic Re: Firewall Statistics Report in General Topics

Firewall Statistics Report

mario11584 — Tue, 12 Nov 2013 18:39:53 GMT

We are looking at upgrading our firewalls from the PA-500 to the PA-3050s. The company I work for is growing fairly rapidly and it's looking good that the company will continue to grow. In order to get the funding for these firewalls we need to prove that we need them or at least that the 500s are obsolete or are quickly becoming that way. I am wondering if there is a way to pull hardware usage statistics in the form of a report, preferably graphs, that show historical data? Any data that can show the load on the firewalls over a period of a couple of days to a week would be ideal.

We currently use the Chrome extension which shows us details within the last hour but we want to see more history than that. I've looked through the report options provided on the Palo Alto but I have not been able to find anything that would satisfy our needs. Any help is appreciated. Thanks!

Re: Firewall Statistics Report

kadak — Tue, 12 Nov 2013 19:09:49 GMT

Hello Mario,

You can run the following commands to get a general know-how about the amount of traffic flowing through the PA500

> show running resource-monitor week <1-13> // Gives you the dataplane usage in terms of last (1-13) week/s

> show session info // Gives the current snapshot of session table utilization

> show system statistics // Gives you the real time usage in terms of throughput and packet rate

Now you can also gather some useful information through the WebUI, under ACC tab where you can sort by sessions/ bytes and also set the time.

You can also use the feature of App Scope under Monitor tab in WebUI to generate reports for bandwidth usage.

Another way to gather information from the PAN firewall would be to monitor it via SNMP and then run a report on the data using something like Splunk.

Hope the above recommendation is what you are looking for.

Thanks and regards,

Kunal Adak

Re: Firewall Statistics Report

_slv_ — Wed, 13 Nov 2013 19:38:15 GMT

I can recomendate to use Cacti or Zabbix, here you are some usefull links:

Cacti - Templates

Zabbix - Basic PA Host Template

Hope it will help You

Regards

Slawek

Re: Firewall Statistics Report

mario11584 — Fri, 15 Nov 2013 16:30:38 GMT

Thanks for the help! This is awesome!