Focus

PAN-OS Device Telemetry Metrics Reference

Traffic Blocked as Command and Control

Table of Contents

Traffic Blocked as Command and Control

Contains URL logs of traffic that was blocked because it was categorized as malware command and control traffic. This helps identify how much of the device's traffic is being blocked as command and control.

Metric Details

Category	Device Health and Performance
Usage	This metric can be used by applications.
Privacy	Can identify a device.
Frequency	Once a week
Introduced	Content version 8284
Telemetry Tier	Full
Equivalent CLI Command	pan_logquery -b -t urlsum -n 5000 -e last-7-days -q '( (category eq malware) or (category eq command-and-control) or (category eq phishing) ) and ( (action eq block) or (action eq deny) or (action eq drop) or (action eq reset-both) or (action eq block-url) )'

Temperature Measurements

Traffic Blocked as Malware