Focus

PAN-OS Device Telemetry Metrics Reference

Malware Sites

Table of Contents

Malware Sites

Collects information on traffic generated by sites known to support malware. (For example, command and control sites.) The information is collected from URL logs, and includes information from the HTTP referer, X-Forwarded-For, and user-agent fields. The requested URI is also collected.

Metric Details

Category	Threat Prevention
Usage	This metric can be used for threat research.
Privacy	Can identify a network.
Frequency	Once a week
Introduced	Content version 8284
Telemetry Tier	Full
Equivalent CLI Command	pan_report_gen -t url -n 20 -ac misc,user_agent,xff,referer -vc count -s count -c 'Malware Sites by URLs' -q 'subtype eq url and category eq malware' -p last-24-hrs

File Identification

Management Plane Statistics