Custom Report for Phishing Attempts

[DaveHartnett]

Folks,

Trying to make a custom report for phishing attempts in PANO. At a loss on how to do it for our 60+ devices.

(LIke a daily report).

Anyone here have any input? Couldnt find anything on the web for "phishing" specifically.

Thanks folks...

[OtakarKlier]

Hello,

Please correct me if I am wrong, however you are looking for a report on email phishing? 

Please advise,

[BPry]

The PA isn't going to pick up on 'phishing' attempts in the convential wording. How this would work is really dependant on how/what you actually want to report on. Pretty much once you get it 'Phishing' any type of reporting is going to be hit and miss because you can't actually label an email as a 'Phishing' attempt by just looking at the header of the message. Even being able to inspect the messages contents you run into a lot of issues with devices miscategorizing or not catching everything. 

I would verify what MGMT is actually looking for here, and it's pretty likely that you won't be able to really generate anything more than a 'best guess' report even after putting in a lot of work into setting something like this up.