Focus

PAN-OS Device Telemetry Metrics Reference

Threats Permitted

Table of Contents

Threats Permitted

Identifies threatening network traffic the firewall failed to block. Collects threat summary log records where the threat type was virus, vulnerability, wildfire-virus, or spyware; the threat severity was greater than or equal to medium; and the firewall's action was only to raise an alert.

Metric Details

Category	Threat Prevention
Usage	This metric can be used by applications. This metric can be used for threat research.
Privacy	Can identify a device.
Frequency	Once a week
Introduced	Content version 8284
Telemetry Tier	Full
Equivalent CLI Command	pan_logquery -b -t thsum -q '(action eq alert) and (severity geq medium) and ( (threat-type eq virus) or (threat-type eq vulnerability) or (threat-type eq wildfire-virus) or (threat-type eq spyware) )' -n 5000 -e last-7-days

Threat Inspection of Mobile Devices

Top Application Usage