Focus

PAN-OS Device Telemetry Metrics Reference

Traffic Blocked as Malware

Table of Contents

Traffic Blocked as Malware

Contains URL logs of traffic that was blocked because it was categorized as malware. This helps identify how much of the device's traffic is being blocked as malware.

Metric Details

Category	Device Health and Performance
Frequency	Daily
Telemetry Tier	Full
Equivalent CLI Command	ROOT: pan_logquery -b -t urlsum -n 5000 -e last-24-hrs -q '( (category eq malware) or (category eq command-and-control) or (category eq phishing) ) and ( (action eq block) or (action eq deny) or (action eq drop) or (action eq reset-both) or (action eq block-url) )'

Timezone and Timestamp

Transceiver Details