Best way to check firewall utilization?

[Phil_Geho]

Using Panorama, what is the best way to check and monitor firewall utilization?

[Raido_Rattameister]

First step is ACC that gives high level overview of sessions, amount of traffic etc.

You can always attach QoS profile to egress interface to get real time graph and app utilization.

Or install pan(w)achrome plugin into chrome to get utilization of physical and virtual interfaces, dataplane utilization etc.

If this is not enough then next step is cli deepdive 🙂

[Remo]

Another easy way to monitor the firewall utilization is SNMP. With an SNMP monitor software you will also be able to store the utilization to get historical views. A few examples for SNMP monitoring:

• Dataplane CPU utilization
• Active sessions (TCP/UDP/icmp) and session utilization
• Decrypted sessions and utilization
• Actual traffic for every physical or logical interface
• ...

When you have deployed panorama in panorama mode:

• Panorama CPU utilization
• Storage capacity
• Global Log rate
• Log rate per firewall
• ...

In panorama the best way is as already described by @Raido_Rattameister with the ACC tab to get a view for the sessions.