Generate traffic report to identify any suspicious traffic

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Generate traffic report to identify any suspicious traffic

L1 Bithead

Hi members,

 

I would like ask if there is way to generate a traffic report for palo alto firewall to show case if the network traffic had any suspicious attack or abnormal traffic for past 1 year ? additionally i have a panorama manage the firewall , is there any use full predefinde report that can show if there is any abnormal or suspicious attack traffic ? 

 

Thank you

1 REPLY 1

L4 Transporter

Hello,

 

That depends what your exactly looking for, what is considered suspicious, and if you maintain logs for a year. On both the firewall and Panorama if you go under the Monitor tab there is some information under "App scope". If you look at the way bottom of the monitor tab you can view the predefined reports. To view a year of history I believe you'll need to create a custom report and filter for what you'd like, for example maybe you're looking for critical threats it may look something like this.

 

Claw4609_0-1708703174294.png

 

Also if you utilize ai-ops (would recommend using this if not already) you can pull various reports related to threats from this as well. Again just kind of depends exactly what you're looking for.

Generate Custom Reports (paloaltonetworks.com)

  • 260 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!