Focus

PAN-OS Device Telemetry Metrics Reference

Malware Sites

Table of Contents

Malware Sites

Collects information on traffic generated by sites known to support malware. (For example, command and control sites.) The information is collected from URL logs, and includes information from the HTTP referer, X-Forwarded-For, and user-agent fields. The requested URI is also collected.

Metric Details

Category	Threat Prevention
Frequency	Daily
Telemetry Tier	Full
Equivalent CLI Command	ROOT: pan_report_gen -t url -n 20 -ac misc,user_agent,xff,referer -vc count -s count -c 'Malware Sites by URLs' -q 'subtype eq url and category eq malware' -p last-24-hrs

File Identification

Management Plane Statistics