View Advanced Threat Prevention in Command Center
Use Command Center in Strata Cloud Manager to view a high-level summary of threats
detected by Advanced Threat Prevention across your network.
| Where Can I Use
This? | What Do I Need? |
|---|
Command Center in Strata Cloud Manager provides a high-level dashboard that summarizes
the health, security, and efficiency of your network. Advanced Threat Prevention
appears as a card in the Command Center Threats tab alongside other Palo Alto Networks®
security services, showing aggregate threat counts and a breakdown by severity.
The Advanced Threat Prevention Card
The Advanced Threat Prevention card displays:
- Total threats—The aggregate count of threats detected by Advanced Threat Prevention across all inspected sessions.
- Blocked and alerted counts—Summary totals showing how many threats were
blocked versus alerted, with a severity breakdown (Critical, High, Medium,
and Low).
- Top Policies—The security policy rules that are generating the most
alerts for the highest active severity level (for example, "Top Policies
Alerting Medium Threats").
The card reflects detections from all standard Advanced Threat Prevention
capabilities, including vulnerability signature detections, Inline Cloud Analysis
(ICA) verdicts, and command-and-control (C2) signature detections.
Advanced Threat Prevention Plus in Command Center
If you have an Advanced Threat Prevention Plus license, the card is labeled Advanced Threat Prevention Plus and includes ATP and
ATP+ tabs. The total threat count reflects detections
from both standard Advanced Threat Prevention and Frontier Virtual Patching.
The ATP tab shows standard Advanced Threat Prevention
detections. The ATP+ tab shows:
- Detection percentage—The percentage of total threats detected by Advanced Threat Prevention Plus (Frontier Virtual Patching).
- License status—A summary of your ATP+ license deployment, including the
number of devices with active licenses, expired licenses, and devices without a
license.
The bottom summary bar separates threat counts by detection type, including
New & Unknown threats detected by Inline Cloud Analysis ML models.
Use the Threat License filter and select
ATP+ to isolate Advanced Threat Prevention Plus
activity.
Select View in Threat Insights to drill down into detection
details in Activity Insights.
