topic Block Threat and URL Filtering Stats in General Topics

Block Threat and URL Filtering Stats

craigmueller — Tue, 07 Oct 2014 19:37:15 GMT

I was trying to find how many threats the PA is blocking and how many URLs it is filtering over a set period of time, so show management how much work these devices are doing.

Is there any way to pull this information off the PA?

I have a PA-5050 running 4.1.15, a PA-5050 running 5.0.5 and PA-5060 running 5.0.6.

Thanks!

Re: Block Threat and URL Filtering Stats

bat — Tue, 07 Oct 2014 19:39:04 GMT

craigmueller

You should look into Monitor > Custom Reports > Threat in "Summary Database" or Threat or URL in "Detailed Database" .

Hope it helps !

Re: Block Threat and URL Filtering Stats

hshah — Tue, 07 Oct 2014 19:40:47 GMT

Hi Craig,

You can write a time query to filter threat and URL logs. That will provide you logs for specific time period. And than you can export logs.

As earlier suggest you can do it via custom reports too.

REgards,

Hardik SHah

Re: Block Threat and URL Filtering Stats

ssharma — Tue, 07 Oct 2014 19:44:46 GMT

To Start off, you can go to pre-defined reports

You can get creative and create custom report based on your requirement later. Hope this helps. Thank you.

Re: Block Threat and URL Filtering Stats

craigmueller — Tue, 07 Oct 2014 20:52:44 GMT

Thanks everyone for your help.

I was looking at the reporting option, but I felt it wasn't the exact information I was looking for.

Found it easier to just to a time window and see how many events showed up. Then just calculate how many per minute.