Monitor incoming and outgoing network traffic

[StGregorys]

We are going to switch over to a new CRM system Monday that will be hosted in the cloud.  I am wanting to monitor the network traffic to see what the increase is once we switch over and where there are any bottlenecks.  Can someone tell me how to setup this tyupe of monitring on a Palo Alto device?  I have a PA-3020

Thanks

[kadak · Accepted solution]

Hello StGregorys,

You can run the following commands to get a general know-how about the amount of traffic flowing through the PA500

> show running resource-monitor week <1-13>              // Gives you the dataplane usage in terms of  last (1-13) week/s

> show session info                                                      // Gives the current snapshot of session table utilization

> show system statistics                                                 // Gives you the real time usage in terms of throughput and packet rate

Now you can also gather some useful information through the WebUI, under ACC tab where you can sort by sessions/ bytes and also set the time.

You can also use the feature of App Scope under Monitor tab in WebUI to generate reports for bandwidth usage.

Another way to gather information from the PAN firewall would be to monitor it via SNMP and then run a report on the data using something like Splunk.

If SNMP is your preferred way, then I would recommend adopting one of the following templates to get statistics from your firewall

Cacti - Templates

Zabbix - Basic PA Host Template

Not to forget session monitoring using MRTG:

Session monitoring with MRTG

Hope the above recommendation is what you are looking for.

Thanks and regards,

Kunal Adak