>
    Strata Copilot
    Insights: Strata Cloud Manager
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Cloud Manager
    3. Navigating Strata Cloud Manager
    4. Insights: Strata Cloud Manager
    Download PDF
    Strata Cloud Manager

    Insights: Strata Cloud Manager

    Table of Contents

    Insights: Strata Cloud Manager

    Get insights into your network activity, security information, and operational tasks.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Panorama or Strata Cloud Manager)
    • NGFW, including those funded by Software NGFW Credits
    • Prisma SD-WAN
    Each of these licenses include access to Strata Cloud Manager:
    The other licenses and prerequisites needed to access certain Dashboards are:
    • Cloud-Delivered Security Services (CDSS)
    • ADEM Observability
    • A role that has permission to view the dashboard
    • Strata Logging Service
    → The features and capabilities available to you in Strata Cloud Manager depend on which license(s) you are using.
    Strata Cloud Manager provides insights into your network activity, offering granular and actionable security and operational information through dashboards. This information helps you protect against vulnerabilities and unauthorized access, while providing management insights on network health, performance, and administrative tasks.

    Insights: Dashboards and Reports

    Strata Cloud Manager supports some of these insights with a set of interactive dashboards that give you a comprehensive view of the applications, ION devices, threats, users, and security subscriptions at work in your network. The dashboards provide visibility into the health, security posture, and activity happening in your deployment that helps you to prevent or address performance and security gaps in your network. Dashboard support extends across the Palo Alto Networks products and subscriptions that are supported for cloud management, and from other sources as well, including Traps, Cortex XDR, Prisma SaaS, and Proofpoint. The data you see often depends on your subscription. You can review each dashboard topic to see what the license requirements are for that dashboard, if role permissions might impact what data is visible, and to learn about the different types of data that each subscription unlocks.
    You can access dashboards from the Insights menu on the left navigation pane. You can also build your own dashboard using the Build My Dashboard option. Some of the dashboards also have the option to download and share reports that you can share offline and schedule for regular updates. To see if reports are supported for a dashboard, check for these icons:
    Additionally, you can use the report templates in the Reports menu to download, share, and schedule reports on specific activity such as User Activity, Network Usage, and so on.

    Integrate with Cloud Identity Engine

    We recommend setting up Cloud Identity Engine (Directory Sync) to get the most out of dashboards. Cloud Identity Engine is a free Palo Alto Networks app that gives other apps read-only access to your Active Directory information, and enables you to:
    • Get User Activity data—Cloud Identity Engine enables you to specify the user for whom you want to run a report.
    • Easily and securely share reports with other members of your organization—After Cloud Identity Engine is set up, you can easily add recipients to a scheduled report. Your report recipients are checked against Cloud Identity Engine, and if no match is found, it performs an additional validation by checking the email address domain against those associated with your support account. This process ensures that reports are only sent to individuals within your organization.
    Integrated apps must be deployed in the same region. At any time, you can go to the hub to integrate Cloud Identity Engine with Prisma Access or Directory Sync. ➡ Integrate Palo Alto Networks apps

    Support for Insights Dashboards and Reports

    The table below shows the list of Insights dashboards and report templates, the platforms they are supported on, license requirements, and so on.
    Some of the dashboard supports in the product are pending migration to Strata Cloud Manager.
    FeatureSupported onLicenses and Other RequirementsScope of Aggregated Data
    Prisma Access ( Managed by Strata Cloud Manager)Prisma Access (Managed by Panorama )*AIOps for NGFW*Prisma SASE Multitenant Platform
    Dashboard: SASE HealthYesYesYes
    • ADEM Observability
    • AI-Powered ADEM
    Dashboard: Best PracticesYesNoPAN-OS versions: 10.0 or laterYes[Only for AIOps for NGFW] Enable telemetry sharing in devices
    • Prisma Access (Managed by Strata Cloud Manager): per tenant
    • AIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFWinstance
    Dashboard: Compliance SummaryNoNoYesNo[Only for AIOps for NGFW] Enable telemetry sharing in devicesAIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    Dashboard: On Demand BPANoNoYesNoTech Support File (TSF)AIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    Dashboard and Report: Executive SummaryYesYesYesYes
    • Strata Logging Service license
    • Threat Prevention license
    • URL Filtering license
    • WildFire license
    • Enterprise DLP license
    		Per Strata Logging Service tenant
    Dashboard and Report: WildFireYes NoYes Yes**WildFire licensePer tenant service group (TSG)
    Dashboard and Report: DNS Security
    The DNS Security dashboard and its associated reports have been deprecated. You can access the related use cases on the InsightsActivity InsightsDomains page. To view the DNS Security and Advanced DNS Security insights, generate a Security Lifecycle Review (SLR) report.
    Log ViewerYesYesYes YesStrata Logging Service licensePer Strata Logging Service tenant
    Threat SearchYes NoYes Yes**Requirements to view trend graph in search:
    • DNS license
    • WildFire license
    • Strata Logging Service license
    • URL Filtering
    Report: Download/Share/ScheduleYesYesYesYesRefer to respective feature column in this table
    Saas SecurityYesNoNoNo
    • Saas Security license
    • Strata Logging Service
    		Per Prisma Access tenant
    Dashboard: Security Posture InsightsNoNoYesNoAIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    Report: Advanced Threat PreventionYesYesNoNo
    • Threat Prevention or Advanced Threat Prevention license
    • Strata Logging Service
    		Per Strata Logging Service tenant
    Dashboard: Device SecurityYesYesYesNoDevice Security licensePer Device Security tenant
    Dashboard and Report: Prisma SD-WANNoNoNoYesPrisma SD-WAN licensePer Prisma SD-WAN tenant
    Dashboard: PAN-OS CVEsNoYesYes[Only for AIOps for NGFW] Enable telemetry sharing in devices
    • AIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    • PSIRT Database of CVEs using API access
    Dashboard: CDSS Adoption YesYesYes[Only for AIOps for NGFW] Enable telemetry sharing in devicesAIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    Dashboard: Feature AdoptionNoYesYes[Only for AIOps for NGFW] Enable telemetry sharing in devicesAIOps for NGFW: per NGFW/ Panorama associated with AIOps for NGFW instance
    Dashboard: NGFW SD-WAN NoNoYesNo[Only for AIOps for NGFW] Enable telemetry sharing in devicesper NGFW/ Panorama associated with AIOps for NGFW instance
    Dashboard and Report: Prisma Access UsageYesYesNoPer Prisma Access tenant
    Report: User Activity YesYes YesNoPer user
    Report: Network ActivityYesYesYesNo
    • Strata Logging Service
    		Per Strata Logging Service tenant
    Dashboard and Report: Activity Insights- Overview YesYesNoNo
    • Strata Logging Service
    		Per Strata Logging Service tenant
    Report: App UsageYesYesNoNo
    • Strata Logging Service
    		Per Strata Logging Service tenant
    Report: GDPR
    Report: SaaS Risk Assessment
    Prisma Access (Panorama Managed)* -
    • For Prisma Access (Panorama managed) users with Strata Logging Service hosted in the non-Americas region, you need to provide consent to allow Prisma Access to read and process data from the Strata Logging Service in the non-Americas region. Review and accept the privacy notice on the Dashboard home page to provide your consent and view more dashboards and logs. Only app, instance, and account administrators can see and accept the privacy notice.
    • Dashboards are not supported in Prisma Access (Panorama managed) multi-tenant environment.
    Yes*—Yes means all versions of Prisma Access and PAN-OS are supported.
    Yes**—In the multitenant platform, tenants are identified as tenant service groups (TSGs) and assigned with TSG ID. A single or multiple tenants can be associated per Customer Support Portal (CSP). The data shown in the dashboard depends on the following scenarios:
    • Your app from which you access the dashboard needs to be TSG supported and accessed through the SASE platform or the tenant view on the hub.
    • You have associated devices with your tenant using Common Services in the hub.
    • Verify if your tenants have one-to-one or many-to-one mapping with CSP.
      • If your tenants have one-to-one mapping with CSP, you can view dashboard data across all sources (for example, in WildFire dashboard, data across samples from Palo Alto Networks firewalls, Prisma Access, Cortex XDR, Prisma SaaS, Proofpoint and manual uploads are shown).
      • If multiple tenants are associated per CSP, the dashboard shows data from only Prisma Access, Palo Alto Networks firewalls, and Panorama appliances associated with specific tenants and not from other sources.
    AIOps for NGFW*—The dashboards available in AIOps for NGFW depend on whether you have a Free or Premium license tier.

    © 2026 Palo Alto Networks, Inc. All rights reserved.