The Threat Insights dashboard provides a holistic view of all threats that the Palo Alto Networks security services detected in your network. You can view the impacted applications, users, security policy rules that allowed or blocked threats in your network, and network sessions in which they were detected. The dashboard also provides a breakdown of threats that your security services are detecting and blocking in your network. You can use the following filters to drill down into specific threats; threat categories, security services that detected the threats, actions taken on threats, and the time range.

Threat Insights is available in Prisma Access, AIOps for NGFW premium only, and Prisma SASE Multitenant Platform (SASE Portal). Go to

Activity > Threat Insights

on the left navigation pane to get started.

In Log Viewer, logs with DLP file submissions now feature a link that takes you to a page with further details about the patterns from the DLP profile that matched the submitted file. Follow the link to get a more complete picture of your DLP incidents and help ensure that your data remains secure.

The new best practices dashboard measures your security posture against Palo Alto Networks’ best practice guidance, and helps you identify areas where you can take quick action to strengthen security and meet compliance requirements.

Importantly, the best practice assessment includes checks for the Center for Internet Security’s Critical Security Controls (CSC). CSC checks are called out separately from other best practice checks, so you can easily pick out and prioritize updates that will bring you up to CSC compliance.