Dear Palo Alto Networks:

[pilecarls8]

Your firewalls are generally okay.

But, the fact that you cannot get an interface bandwidth graph without configuring some QoS hack to only show an ingress interface traffic graph is stupid.

Every firewall vendor in the world has this feature. Except you.

Please fix this idiocy.

[OtakarKlier]

Hello,

This should be submitted as a feature request that is sent to your SE.

Regards,

[hshawn]

While I do agree with you, my guess is they rely on their customers using something else for this (PRTG, LibreNMS, Obersvium, other). You can also use the Pan(w)achrome extension in your browser which will use the API to generate the data/charts/graphs.

[MP18]

like it.

very usefull 

do i need fw gui open to get the stats?

will close the fw gui does it still gets stat from the fw?

[BPry]

@MP18,

Assuming that you are talking about pan(w)achrome, you can close the GUI and still receive updated stats in the extension without issue. 

[MP18]

Hi BPry,

Yes i was talking about pan(w).

Seems when i close the web gui i can still access the stats.

curious to know how does this work in background to pull the stats from PA?

Is there any way we can see the logs in PA that shows us chrome extension pan(w) is pulling stats from the PA?

Regards

[Remo]

@MP18 

pan(w)achrome uses the API in the background to query all these informations. You should see this in the list of logged in users.

[Remo]

I prefer a firewall that is really good at firewalling, analyzing traffic, blocking threats, providing secure connections for clients and so on rather than showing an overall graph for the current bandwidth of an interface : P

Ok, lets be serious, in the past I also had a few situations where something like that would have been useful, but as it is easily doable with additional tools - like the one mentionned by @hshawn - it wasn't really a problem for me. @pilecarls8 did you get in contact with your SE to create a feature request for this, like @OtakarKlier proposed?

[LAYER_8]

Pan(w)achrome is a great tool. If you wanted to build something yourself open-source, you would want to look into Grafana or prometheus utilizing the NGFWs "SNMP Trap" profile feature.