Report not showing URL by name, just IP

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L1 Bithead

Report not showing URL by name, just IP

Hello,

 

We are new to using reporting on the PA 3020. When we run reports, specifically a user report, we would like to see the URL by name of the location on the Internet our user was visiting. However, as shown in the included photo, some URL's are decoded and some still show IP only. Is there a config or something we've missed? Is there a method to show URL by name, not by IP?

 

Capture.PNG

Tags (4)
Highlighted
L1 Bithead

So as an update, that I missed before posting this, is that in PAN 7.1.0 this issue is resolved. We are running PAN 7.0.8, but have a maintenance window tonight/tomorrow morning at 5am to update to PAN 7.10. Can someone confirm that the issue I am referring to is in fact fixed in PAN 7.1 (or above) and can reasonably believe that the reporting bug will be resolved when we upgrade tonight? Thank you.

Highlighted
Cyber Elite

Neither of the IPs that you have indicated actually register to a domain, which is why the information is not getting included. The host name is going to get pulled if your PA is able to resolve the name, if it isn't then the IP address will get shown in that field. 

Highlighted
L1 Bithead

Fair enough comment based on the sample image given.  I wrote this posting with some knowledge in my head without it leaking out through my fingers into my post. But even known sites like Google, Facebook, CNN and others are not resolving across the board for us in regards to reporting.  I did read that in reporting there was a bug in prior versions.  I can go into the monitor tab, under Threat, Traffic or URL filtering and see DNS resolution there. 

Highlighted
Cyber Elite

@Dave_Howard,

I'm not exactly sure what bug you are referencing, my guess would be PAN-58496. I don't think that the update is going to fix this for you. In my longer reports I get resolution for the first page or so of hosts, but not after that with 7.1.10 installed. 8.0.2 on my lab enviroment I get things displayed the same. 

Highlighted
L1 Bithead

referring to a bug that was in another community posting dated about 18 months or so ago that I happened to run across. That bug was reported in PAN 6.XX and resolved (reportedly) in PAN 7.1 and above. When you indicate 8.x in your test environment, I'm not sure what you're referring to. We don't use Panorama, only a PA firewall 3020. I'm not sure we are having an apples/apples conversation.

Highlighted
Cyber Elite

8.0.2 was referring to the PANos version. I think you are likely to see the same results even after your update unless I'm missing your problem completely. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!