Activeboard: Palo Alto Networks Firewalls Summary

[ 1 Purpose ] [ 2 Prerequisites ] [ 3 Open Activeboard ] [ 4 Use Activeboard ]

Purpose

Palo Alto Networks Firewalls Summary allows you to auto-discover all installed firewall entities deployed in your network and start collecting operational and threats intelligence from them in a unified view. You can also center the analysis of network threats and alerts on individual network elements, and filter all events related to them.

Active Firewalls: Simple value widget	Destination IP Input: Text box input	Destination IP List: Table widget
Potential Threats Detected: Simple value widget	Source IP Input: Text box input	Firewall Actions (Allow vs. Deny): Donut chart widget
Critical System Events: Simple value widget	Source IP List: Table widget	Top Source IPs (by bytes): Table widget
Admin Login Attempts: Simple value widget	Bandwith: Line chart widget

Prerequisites

To use this Activeboard, you must have the following data sources available on your domain:

firewall.paloalto.traffic ^{learn more}
firewall.paloalto.threat^{learn more}
firewall.paloalto.system ^{learn more}

Open Activeboard

Once you have installed the Activeboard, you can use the Open button at the top right of the card in Exchange to access it and see the different widgets populated with the relevant data. You can also access the Activeboard area via the Navigation pane.

Data loading takes too long?

Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to the Aggregation tasks article to learn how to do it.

Use Activeboard

After installing and opening the Activeboard, you can use its widgets to visualize and monitor data. To do this, each widget offers a variety of customization and visualization options. Refer to Using widgets and Using inputs to know them all.