Panorama Botnet View

[apc050]

Hi All,

Where do you find the Botnet monitor and reports for firewalls running 4.x from a Panorama interface running 4.x? And minimum level permission is required in order to see these Botnet reports?

Appreciate the assistance.

[bvandivier]

Botnet reports should be located under Monitor > PDF Reports > Reports > Threat Reports (on the right) > Botnet.

If using an admin role one will need permissions to view Monitor as well as Threat Reports.

[mschuricht · Accepted solution]

The Botnet report is not present in Panorama.

It is only on the devices, however you can switch context to a device to view the local Botnet report if needed.

[MMCiobanu]

when I switch context to a device to view the local Botnet report, it only shows if I am logged in as a local admin; we use Radius authentication, and if I am logged in using my admin account authenticating through Radius, Botnet, Packet Capture and Session Browser don't show up;

However, they do if I am logged in using the same Radius account on the local device.

Is this a Panorama bug?

Thank you

[pulukas]

When you log into Panorama, the windowed connections to the specific devices are proxied by Panorama and not under you own login.  You don't need to have any local accounts or RADIUS setup on the devices managed by Panorama, it can manage them via the Panorama connection without local accounts on the devices.

[MMCiobanu]

I cannot then explain that when logged on Panorama using the local admin account, and changing the context to firewall, Botnet, Packet Capture is displayed; but, if logged in as radius admin and change context, these tabs are hidden.

[rmonvon]

Please check the admin role & the Access Control (Device Group, Template, & Device Context) for the radius admin account.  Make sure you have given access for the radius admin.  Thanks.