Block Threat and URL Filtering Stats

[craigmueller]

I was trying to find how many threats the PA is blocking and how many URLs it is filtering over a set period of time, so show management how much work these devices are doing.

Is there any way to pull this information off the PA?

I have a PA-5050 running 4.1.15, a PA-5050 running 5.0.5 and PA-5060 running 5.0.6.

Thanks!

[bat]

craigmueller

You should look into Monitor > Custom Reports > Threat in "Summary Database" or Threat or URL in "Detailed Database" .

Hope it helps !

[hshah · Accepted solution]

Hi Craig,

You can write a time query to filter threat and URL logs. That will provide you logs for specific time period. And than you can export logs.

As earlier suggest you can do it via custom reports too.

REgards,

Hardik SHah

[ssharma]

To Start off, you can go to pre-defined reports

You can get creative and create custom report based on your requirement later. Hope this helps. Thank you.

[craigmueller]

Thanks everyone for your help.

I was looking at the reporting option, but I felt it wasn't the exact information I was looking for.

Found it easier to just to a time window and see how many events showed up. Then just calculate how many per minute.