PaloAlto Bandwidth Report

[sgoethals]

Hi,

I have an existing web application that I am contemplating moving to the cloud from on-prem.  The app currently sits in a DMZ on a Palo 220.

I am trying to determine the costs we would incur if we moved the app to the cloud.  I need to get a good understanding of the bandwidth that comes into the app, and goes out.  The traffic is based on http/https. Essentially a request comes into the application, it will make some queries to various resources on the Internet, and then take that data and pass it back to the requestor.

Is there an easy way for me to get a report of the http/https traffic that is passed between the untrusted network and a DMZ zone to this application?  Since I am sure the cloud service will want to charge for both incoming and outgoing traffic, I need to know what amount of traffic I currently have passing between these two zones.

I know there are various reports available from the Palo, and I could use some suggestions on how to gather the data that I need.

I appreciate any help that I receive.  Thank you.

[Remo · Accepted solution]

Hi @sgoethals 

For this I would create a custom report with a filter like the following:

(addr in #.#.#.#) and (zone eq "INTERNETZONE")

As fields in the report add day, bytes received and bytes sent. As report period use the timeframe you like and you will see the amount of traffic that you need for the cost calculation. At least this applies if incoming anf outgoing traffic is charged at the same price. If the costs are different, then create two reports: one for connections towards your webserver and one for connections from the webserver.

[sgoethals]

Thank you.  I will set this up and give it a try.