About mattgudgeon

Hi, I'm quite new to PAN firewalls, and I find the ACC page to be very informative and can usually find all the info I need from there. However, I've just had the IT manager request (and omg hes not a happy camper at me) a report of the usage of our internet as we just received an email stating we had gone over our limit for the month, which is strange as we never normally get within 75% of the quota. Therefore, hes requested that I run a report from the start of the current month to today to find out where or who has done too much downloading as our quote is only downloaded bytes, uploads aren't counted towards the quota. Now our external interface that the internet router connects to is ethernet1/1 So what I basically want to do is generate a couple of reports that will show whats apps have used the bandwidth this month and then what users have gone to town.. My problem is that I really don't know what fields to include in the custom report to show the info that I need.. Any help would be greatly appreciated.. Also on another note, when I go to the ACC and choose the time frame of this month its reporting some very funky data.. the web browsing is showing a some definate wrong info.. as you see, its telling me I've basically downloaded the entire internet so far this month and to top it off the top 6 sources have completely incorrect info as well as anything in the 10.x.x.x subnet are our stores subnets and they don't even have external access back through our internet link. EDIT::.. I've attached the image from above.. it looks a bit average when its inserted ... View more

Hi Guys, I'm quite new to PAN so please excuse my ignorance.. So far I'm very impressed with the content analysis and the in depth reporting it gives me on a network. One thing I really like is that I can drill down into a specific users web-browsing session and see exactly what file they've downloaded, however, I can not do the same with a simple FTP session. The log details show all the data except the file name, which is something that I really need to be able to look at. Out new 2020 PAN's replaced our old WatchGuard units that had extremely poor reporting capabilities, however seeing the file content of a FTP session was something that it was able to do. So I would only expect something of PAN's abilities, that it too can report the same info. Our Firewall is setup pretty tight, however the only application that is fairly open is our FTP rule (much to my disgust) as we have a lot of employe's that need to upload data to distributors and suppliers. Furthermore, also all of our store updates and daily sales files are transfers between stores and Head Office through the FTP protocol, so our weekly FTP data throughput is anywhere between 12-16GB. I know most of the users that need/should be using the FTP protocol, however, I would like to be able to inspect a users FTP session, if I feel that A.) The a users shouldn't really be using FTP or B:) If I see a users FTP session is larger then what they should be sending. So basically I need to see if a users is sending files or data out through FTP that they shouldn't. So my question is, is this possible?? Sorry for my long winded explanation/request and thanks in advance for you time. Matt ... View more