Best way to check firewall utilization?

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Best way to check firewall utilization?

L0 Member
Using Panorama, what is the best way to check and monitor firewall utilization?

Cyber Elite
Cyber Elite

First step is ACC that gives high level overview of sessions, amount of traffic etc.

You can always attach QoS profile to egress interface to get real time graph and app utilization.

Or install pan(w)achrome plugin into chrome to get utilization of physical and virtual interfaces, dataplane utilization etc.

If this is not enough then next step is cli deepdive 🙂

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

L7 Applicator

Another easy way to monitor the firewall utilization is SNMP. With an SNMP monitor software you will also be able to store the utilization to get historical views. A few examples for SNMP monitoring:

  • Dataplane CPU utilization
  • Active sessions (TCP/UDP/icmp) and session utilization
  • Decrypted sessions and utilization
  • Actual traffic for every physical or logical interface
  • ...

When you have deployed panorama in panorama mode:

  • Panorama CPU utilization
  • Storage capacity
  • Global Log rate
  • Log rate per firewall
  • ...


In panorama the best way is as already described by @Raido_Rattameister with the ACC tab to get a view for the sessions.

  • 2 replies
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!