...
| Table of Contents | ||||||
|---|---|---|---|---|---|---|
|
Purpose
Palo Alto Networks Firewalls Summary allows you to auto-discover all installed firewall entities deployed in your network and start collecting operational and threats intelligence from them in a unified view. You can also center the analysis of network threats and alerts on individual network elements, and filter all events related to them.
Pre-requisites
...
| Table of Contents | ||||||
|---|---|---|---|---|---|---|
|
...
Purpose
Firewall Monitoring Activeboard allows you to analyze and monitor firewall traffic logs from different angles. In this Activeboard you will be able to:
Get data insights and filter them.
Track the traffic volume and actions.
Have access to Traffic Reputation heatmaps.
Compare the connections.
Get details about the most used Firewall rules.
Analyze denied firewall traffic and most rejected source IPs.
| Expand | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||
| Tip |
|---|
This activeboard supports multitenancy. |
Prerequisites
To use this Activeboard, you must have the following data sources available on your domain:
firewall.
...
all.trafficlearn more
...
firewall.paloalto.threatlearn more
...
firewall.paloalto.system learn more
...
Open Activeboard
Once you have installed the
...
Activeboard, you can
...
Go to Exchange in the navigation pane and look for the Activeboard you want to open. Click Open.
...
| Info |
|---|
Refer to Manage and filter Activeboards article to know how to work with Activeboards. |
Exploring the Activeboard
When opening the Palo Alto Network Firewalls Summary Activeboard, the following info displays:
...
| Rw expand | ||
|---|---|---|
|
...
Widget
...
Details
...
1
...
Active Firewalls
...
2
...
Potential Threats Detected
...
3
...
Critical System Events
...
4
...
Admin Login Attempts
...
5
...
Destination IP Input
...
6
...
Source IP Input
...
7
...
Source IP List
...
8
...
Bandwith
...
9
...
Destination IP List
...
10
...
Firewall Actions (Allow vs. Deny)
...
11
...
use the Open button at the top right of the card in Exchange to access it and see the different widgets populated with the relevant data. You can also access the Activeboard area via the Navigation pane.
...
| Info |
|---|
Data loading takes too long? Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to the Aggregation tasks article to learn how to do it. |
Use Activeboard
After installing and opening the Activeboard, you can use its widgets to visualize and monitor data. To do this, each widget offers a variety of customization and visualization options. Refer to Using widgets and Using inputs to know them all.