Simply correlate theats and URL's

[asecus]

I'm surfing throgh differents threats (virus,spyware,etc) in the monitor windows and in some cases I find out in the other filed the URL wher it came from otherwise moslty of the time I just see the source/destination IP.

My question: is possible to correlate URL and threath ? If yes how aprt from the timestamp combinated with sessionid ?

Thanks Boris

[mjacobsen]

The manual correlation method you mentioned is the only option in the current software. We have a feature coming in PAN-OS 3.1 that will automatically correlate and show all related logs when you view the log details. This will show you the complete history of a session in a single view.

Mike

[asecus]

I'm also running 3.1 beta (3.1.0-b25) and I can't find this feature, can you help me ?

Thanks

[mjacobsen]

Clicking the Log Details link on the far right of a row in the log viewer will bring up the details of the log as wells as a new table showing all of the associated logs. The layout in b25 is not quite right and the data is probably off of the screen at the bottom.

Mike