topic Re: Dear Palo Alto Networks: in General Topics

Dear Palo Alto Networks:

pilecarls8 — Wed, 06 May 2020 14:57:42 GMT

Your firewalls are generally okay.

But, the fact that you cannot get an interface bandwidth graph without configuring some QoS hack to only show an ingress interface traffic graph is stupid.

Every firewall vendor in the world has this feature. Except you.

Please fix this idiocy.

Re: Dear Palo Alto Networks:

OtakarKlier — Wed, 06 May 2020 17:10:33 GMT

Hello,

This should be submitted as a feature request that is sent to your SE.

Regards,

Re: Dear Palo Alto Networks:

hshawn — Wed, 06 May 2020 18:19:46 GMT

While I do agree with you, my guess is they rely on their customers using something else for this (PRTG, LibreNMS, Obersvium, other). You can also use the Pan(w)achrome extension in your browser which will use the API to generate the data/charts/graphs.

Re: Dear Palo Alto Networks:

MP18 — Wed, 06 May 2020 22:46:21 GMT

like it.

very usefull

do i need fw gui open to get the stats?

will close the fw gui does it still gets stat from the fw?

Re: Dear Palo Alto Networks:

BPry — Thu, 07 May 2020 01:30:35 GMT

@MP18,

Assuming that you are talking about pan(w)achrome, you can close the GUI and still receive updated stats in the extension without issue.

Re: Dear Palo Alto Networks:

MP18 — Thu, 07 May 2020 04:07:28 GMT

Hi BPry,

Yes i was talking about pan(w).

Seems when i close the web gui i can still access the stats.

curious to know how does this work in background to pull the stats from PA?

Is there any way we can see the logs in PA that shows us chrome extension pan(w) is pulling stats from the PA?

Regards

Re: Dear Palo Alto Networks:

Remo — Sun, 25 Jul 2021 11:39:15 GMT

@MP18

pan(w)achrome uses the API in the background to query all these informations. You should see this in the list of logged in users.

Re: Dear Palo Alto Networks:

Remo — Sun, 25 Jul 2021 11:59:35 GMT

I prefer a firewall that is really good at firewalling, analyzing traffic, blocking threats, providing secure connections for clients and so on rather than showing an overall graph for the current bandwidth of an interface : P

Ok, lets be serious, in the past I also had a few situations where something like that would have been useful, but as it is easily doable with additional tools - like the one mentionned by @hshawn - it wasn't really a problem for me. @pilecarls8 did you get in contact with your SE to create a feature request for this, like @OtakarKlier proposed?

Re: Dear Palo Alto Networks:

LAYER_8 — Mon, 26 Jul 2021 12:56:43 GMT

Pan(w)achrome is a great tool. If you wanted to build something yourself open-source, you would want to look into Grafana or prometheus utilizing the NGFWs "SNMP Trap" profile feature.