The botnet report enables you to use behavior-based
mechanisms to identify potential malware- and botnet-infected hosts
in your network. The report assigns each host a confidence score
of 1 to 5 to indicate the likelihood of botnet infection, where
5 indicates the highest likelihood. Before scheduling the report
or running it on demand, you must configure it to identify types
of traffic as suspicious. The PAN-OS® Administrator’s Guide provides
details on interpreting botnet report output.