View Cloud NGFW Metrics in Strata Cloud Manager
Monitor resource and traffic metrics for your Cloud NGFW for AWS resources in Strata
Cloud Manager.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- Cloud NGFW subscription
- Palo Alto Networks Customer Support Account (CSP)
- AWS Marketplace account
- Strata Cloud Manager Essentials or Pro license
|
Whether you manage your Cloud NGFW for AWS resources with Strata™ Cloud Manager or with
Panorama®, you can view resource and traffic metrics for each firewall in Strata Cloud
Manager, the same console you use for your other NGFWs. Use these metrics to spot
capacity constraints, track traffic trends, and troubleshoot performance issues without
setting up custom metrics in AWS CloudWatch.
To view metrics in Strata Cloud Manager, select , then select your Cloud NGFW from the NGFW List.
The Device Details page shows metrics on two tabs:
- Resource Metrics: Dataplane CPU utilization and packet buffer
utilization.
- Traffic Metrics: Session and traffic metrics such as
connections per second, data throughput, packet rate, and session table
utilization.
The following table describes the metrics available for Cloud NGFW for AWS:
| Metric | Description |
|---|
| CPU Utilization (%) | Monitors dataplane CPU usage and measures the traffic load on the
firewall. |
| Packet Buffer Utilization (%) | Monitors dataplane buffer usage and measures buffer utilization. If
you have a sudden burst in traffic, monitoring your buffer utilization
helps you ensure that the firewall does not deplete the dataplane
buffer, which results in dropped packets. |
| ConfigMemoryUtilization (%) | Monitors firewall memory usage against the size of the Strata Cloud
Manager configuration commit file. |
| ConnectionsPerSecond | Monitors the rate at which the firewall establishes new connections
per second. |
| SessionThroughputKbps | Monitors the throughput in Kbps. |
| SessionThroughputPps | Monitors the number of packets per second. |
| Sessions Active | Monitors the total number of sessions that are active on the
firewall. An active session is a session in the flow lookup table whose
packets the firewall inspects and forwards as policy requires. |
| Session Utilization (%) | Monitors the TCP, UDP, ICMP, and SSL sessions to determine
utilization. |
| SSLProxyUtilization (%) | Monitors the percentage of SSL Forward Proxy sessions with clients
for SSL/TLS decryption. |
| BytesIn | Number of bytes in the server-to-client direction of the
session. |
| BytesOut | Number of bytes in the client-to-server direction of the
session. |
| PktsIn | Number of server-to-client packets for the session. |
| PktsOut | Number of client-to-server packets for the session. |
