cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who Me Too'd this topic

How to find active high bandwidth user

L4 Transporter

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?

We have all of our security policies set to log on session end, so that traffic log wouldn't help since the session would still be open.

The Session Browser kind of helps, but the inability to filter for time and the maximum size for the "bytes" filter being 1GB makes it so I still need to comb through a lot of open sessions.

Who Me Too'd this topic