How to findout the individual total number of HTTP and HTTPS session count.

[Gururaj]

Hi Team,

How to findout the individual total number of  HTTP and HTTPS session count.

For example : Total session count is 1000

I need in this total 1000 session how many HTTP and HTTPS

HTTP session : 700

HTTPS session: 300

Regards,

Gururaj

[VinceM]

Hi,

By cli, you can use: show system statistics application. Will provide you real time monitoring per apps.

If you want to have the info through WUI, you can use this command through the API. (exemple: pan(a)chrome) and docs: https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/technical-documen...

Hope help

V.

[Lucky · Accepted solution]

Hello Gururaj,

to count active HTTP sessions you can use CLI command:
show session all filter application web-browsing count yes

To count active HTTPS sessions, just change application:
show session all filter application ssl count yes

Regards

Luciano

[santonic]

This one is close, but not accuate. Especially on port 80 you will have many different applications, not just web-browsing.

Try instead:

show session all filter destination-port 443 count yes

show session all filter destination-port 80 count yes

[santonic]

Or if you want to make it automatic or need data for the past:

Custom report -> from Traffic Log -> Query: (port.dst eq 80) or (port.dst eq 443) -> Columns: Destination port, Repeat Count -> Group by destination port, Sort by repeat count.

Then you get something like this:

[Lucky]

Good catch, santonic - but generally, that is the principle. Show session all filter _something_ and optionally count yes.