Detailed Device Health on Panorama
Table of Contents
Expand all | Collapse all
-
- Firewall Overview
- Features and Benefits
- Last Login Time and Failed Login Attempts
- Message of the Day
- Task Manager
- Language
- Alarms
- Commit Changes
- Save Candidate Configurations
- Revert Changes
- Lock Configurations
- Global Find
- Threat Details
- AutoFocus Intelligence Summary
- Configuration Table Export
- Change Boot Mode
-
- Objects > Addresses
- Objects > Address Groups
- Objects > Regions
- Objects > Dynamic User Groups
- Objects > Application Groups
- Objects > Application Filters
- Objects > Services
- Objects > Service Groups
- Objects > Devices
- Objects > External Dynamic Lists
- Objects > Custom Objects > Spyware/Vulnerability
- Objects > Custom Objects > URL Category
- Objects > Security Profiles > Antivirus
- Objects > Security Profiles > Anti-Spyware Profile
- Objects > Security Profiles > Vulnerability Protection
- Objects > Security Profiles > File Blocking
- Objects > Security Profiles > WildFire Analysis
- Objects > Security Profiles > Data Filtering
- Objects > Security Profiles > DoS Protection
- Objects > Security Profiles > Mobile Network Protection
- Objects > Security Profiles > SCTP Protection
- Objects > Security Profile Groups
- Objects > Log Forwarding
- Objects > Authentication
- Objects > Packet Broker Profile
- Objects > Schedules
-
-
- Firewall Interfaces Overview
- Common Building Blocks for Firewall Interfaces
- Common Building Blocks for PA-7000 Series Firewall Interfaces
- Tap Interface
- HA Interface
- Virtual Wire Interface
- Virtual Wire Subinterface
- PA-7000 Series Layer 2 Interface
- PA-7000 Series Layer 2 Subinterface
- PA-7000 Series Layer 3 Interface
- Layer 3 Interface
- Layer 3 Subinterface
- Log Card Interface
- Log Card Subinterface
- Decrypt Mirror Interface
- Aggregate Ethernet (AE) Interface Group
- Aggregate Ethernet (AE) Interface
- Network > Interfaces > VLAN
- Network > Interfaces > Loopback
- Network > Interfaces > Tunnel
- Network > Interfaces > SD-WAN
- Network > VLANs
- Network > Virtual Wires
-
- Network > Routing > Logical Routers > General
- Network > Routing > Logical Routers > Static
- Network > Routing > Logical Routers > OSPF
- Network > Routing > Logical Routers > OSPFv3
- Network > Routing > Logical Routers > RIPv2
- Network > Routing > Logical Routers > BGP
- Network > Routing > Logical Routers > Multicast
-
- Network > Routing > Routing Profiles > BGP
- Network > Routing > Routing Profiles > BFD
- Network > Routing > Routing Profiles > OSPF
- Network > Routing > Routing Profiles > OSPFv3
- Network > Routing > Routing Profiles > RIPv2
- Network > Routing > Routing Profiles > Filters
- Network > Routing > Routing Profiles > Multicast
-
- Network > Network Profiles > GlobalProtect IPSec Crypto
- Network > Network Profiles > IPSec Crypto
- Network > Network Profiles > IKE Crypto
- Network > Network Profiles > Monitor
- Network > Network Profiles > Interface Mgmt
- Network > Network Profiles > QoS
- Network > Network Profiles > LLDP Profile
- Network > Network Profiles > SD-WAN Interface Profile
-
-
- Device > Setup
- Device > Setup > Management
- Device > Setup > Interfaces
- Device > Setup > Telemetry
- Device > Setup > Content-ID
- Device > Setup > WildFire
- Device > Setup > ACE
- Device > Setup > DLP
- Device > Log Forwarding Card
- Device > Config Audit
- Device > Administrators
- Device > Admin Roles
- Device > Access Domain
- Device > Authentication Sequence
- Device > Device Quarantine
-
- Security Policy Match
- QoS Policy Match
- Authentication Policy Match
- Decryption/SSL Policy Match
- NAT Policy Match
- Policy Based Forwarding Policy Match
- DoS Policy Match
- Routing
- Test Wildfire
- Threat Vault
- Ping
- Trace Route
- Log Collector Connectivity
- External Dynamic List
- Update Server
- Test Cloud Logging Service Status
- Test Cloud GP Service Status
- Device > Virtual Systems
- Device > Shared Gateways
- Device > Certificate Management
- Device > Certificate Management > Certificate Profile
- Device > Certificate Management > OCSP Responder
- Device > Certificate Management > SSL/TLS Service Profile
- Device > Certificate Management > SCEP
- Device > Certificate Management > SSL Decryption Exclusion
- Device > Certificate Management > SSH Service Profile
- Device > Response Pages
- Device > Server Profiles
- Device > Server Profiles > SNMP Trap
- Device > Server Profiles > Syslog
- Device > Server Profiles > Email
- Device > Server Profiles > HTTP
- Device > Server Profiles > NetFlow
- Device > Server Profiles > RADIUS
- Device > Server Profiles > SCP
- Device > Server Profiles > TACACS+
- Device > Server Profiles > LDAP
- Device > Server Profiles > Kerberos
- Device > Server Profiles > SAML Identity Provider
- Device > Server Profiles > DNS
- Device > Server Profiles > Multi Factor Authentication
- Device > Local User Database > Users
- Device > Local User Database > User Groups
- Device > Scheduled Log Export
- Device > Software
- Device > Dynamic Updates
- Device > Licenses
- Device > Support
- Device > Policy Recommendation > IoT
- Device > Policy > Recommendation SaaS
-
- Network > GlobalProtect > MDM
- Network > GlobalProtect > Clientless Apps
- Network > GlobalProtect > Clientless App Groups
- Objects > GlobalProtect > HIP Profiles
-
- Use the Panorama Web Interface
- Context Switch
- Panorama Commit Operations
- Defining Policies on Panorama
- Log Storage Partitions for a Panorama Virtual Appliance in Legacy Mode
- Panorama > Setup > Interfaces
- Panorama > High Availability
- Panorama > Administrators
- Panorama > Admin Roles
- Panorama > Access Domains
- Panorama > Device Groups
- Panorama > Plugins
- Panorama > Log Ingestion Profile
- Panorama > Log Settings
- Panorama > Server Profiles > SCP
- Panorama > Scheduled Config Export
- Panorama > Device Registration Auth Key
Detailed Device Health on Panorama
Description of the Detailed Device View for device monitoring
on Panorama™.
You can view a detailed device health history of an
individual firewall by clicking the Device Name in either the All
Devices tab or the Deviating Devices tab. The Detailed Device view
provides the health status history using a time filter and displays
the metadata associated with the device. Device health information
is displayed as a table or as a widget where possible to provide
a graphical representation of time-trended data.
Manage the Detailed Device View
Description of the web interface elements in the Detailed
Device view.
Along with descriptive metadata associated with the
firewall, the Detailed Device view displays the detailed firewall
health information. Where applicable, you can configure Settings
(
) for additional
options for the widget or Maximize Panel (
) to enlarge the
widget.
Field | Description |
---|---|
Actions | |
Time Filter | Select the time filter to view the device
health history from the drop-down. You can select Last
12 hours, 24 hours, 7
days, 15 days, 30
days, or 90 days. |
Show Average | Select the average and standard distribution
shown on all time-trended widgets. You can select None, Last
24 hours, 7 days, or 15
days. |
Refresh | Refresh displayed information with the latest
data. |
Print PDF | Generate a PDF of the currently displayed
tab. You need to have pop-ups enabled to select a download location
and access the PDF. |
System Information | |
System Information | The metadata associated with the device:
IP address, software version, antivirus version, HA status, serial
number, App and Threat version, Wildfire version, VSYS mode, model,
and device mode. |
Sessions
Descriptions of the fields displayed in the Sessions
tab of the Detailed Device view.
The Sessions tab displays the session information passing
through the firewall. This information is displays as six individual
graphs.
Field | Description |
---|---|
Throughput | The data throughput over time (five-minute
average) measured in kilobits per second (Kbps). |
Session Count | Total session count over time
(five-minute average). |
Connections per Second | Total CPS for the device over
time (five-minute average). |
Packets per Second | Total packets per second (averaged
over five minutes) that passed through the device. |
Global Session Table Utilization (PA-7000
and PA-5200 appliances only) | The percentage of the global session table
over time for firewalls that have a global session table (averaged
over five minutes). |
Session Table Utilization | Shows the percentage of the
session table usage for each dataplane for the firewall against
time (averaged over five minutes). |
SSL Decrypted Sessions Info | Shows the number of decrypted SSL sessions
over time (averaged over five minutes). |
SSL Proxy Session Utilization | Shows the utilization percentage of proxy
sessions over time (averaged over five minutes). |
Environments
Descriptions of the fields displayed in the Environments
tab of the Detailed Device view.
The Environments tab displays
the presence, status, and operating condition for hardware, such
as power supplies, fan trays, and disk drives. This tab displays
only for hardware-based firewalls:
Field | Description |
---|---|
Fan Status | Displays the presence, current status, RPM,
and last failure of the fans in each fan tray. Fan status is displayed
as A/B, where A is the
number of good, running fans and B is the total
number of fans on the firewall. Virtual firewalls display N/A. |
Power Supply | Displays the presence, current
status, and last failure timestamps. Power supply status is displayed
as A/B, where A is the
number of good, running power supplies and B is
the total number of power supplies on the device. Virtual firewalls
display N/A. |
Thermal Status | Displays whether there are
any thermal alarms associated with each slot of the device. If there
is an active alarm, the firewall also displays more specific information
here regarding exact temperature and location. |
System Disk Status | Displays the available, used, and utilization
percentage for the root, pancfg, panlogs, and panrepo mounts. System
Disk Status also displays the disk name, size, and RAID status for
firewalls that are RAID enabled. |
Interfaces
Descriptions of the fields displayed in the Interfaces
tab of the Detailed Device view.
The Interfaces tab displays the status and statistics
across all physical interfaces on the firewall.
Field | Description |
---|---|
Interface Name | The name of the interface. Select an Interface
to view graphs of the Bit Rate, Packets per Second, Errors, and
Drops for the selected interface. |
Status | The status of the interface: AdminUp, Admin Down, OperationalUp,
or Operational Down. |
Bit Rate | Displays the bit rate (bps)
for received and transmitted data. |
Packets per Second | Displays the packets per second
for received and transmitted data. |
Errors | Displays the number of errors
for received and transmitted data. |
Drops | Displays the number of dropped connections
for received and transmitted data. |
Logging
Descriptions of the field displayed in the Logging tab
of the Detailed Device view.
The Logging tab displays the logging rates and connections
across manages firewalls.
Field | Description |
---|---|
Logging Rate | Displays the one-minute averaged rate for
the device forwarding logs to Panorama or a Log Collector. |
Logging Connections | Displays all available log
forwarding connections, including their active or inactive status. |
External Log Forwarding | Displays the sent, dropped, and average
forwarding rate (logs per second) for various types of external
log forwarding methods. |
Resources
Descriptions of the fields displayed in the Resources
tab of the Detailed Device view.
The Resources tab displays the CPU and memory statistics
for the firewall.
Field | Description |
---|---|
Management Plane Memory | Displays the time-trended, five-minute average
of the management plane memory as a percentage. |
Packet Buffers | Displays the time-trended,
five-minute average of the packet buffer utilization as a percentage.
On a multiple dataplane system, this display includes different
dataplanes, CPU, and packet buffers in different colors. |
Packet Descriptors | Displays the time-trended,
five-minute average of the packet descriptor utilization as a percentage.
On a multiple dataplane system, this display includes different
dataplanes, CPU, and packet buffers in different colors. |
CPU Management Plane | Displays the time-trended,
five-minute average of the management plane CPU. |
CPU Data Plane | Displays the time-trended, five-minute average
per-core utilization of the dataplane CPU. For systems with multiple
data planes, you can select which dataplane to view selector. |
Mounts | Displays the device system file info. This
display includes the mount Name, Allocated (KB), Used (KB), and
Avail (KB) space, as well as the Utilization percentage. |
High Availability
Descriptions of the fields displayed in the High Availability
tab of the Detailed Device View page.
The High Availability tab displays the HA status of
the firewall and its HA peer. The top widget displays the configuration
and content version of the device and its peers. The bottom widget
provides information on the previous HA failovers and the reasons
associated with it, including which firewall experienced the failure.