PAN-OS® metrics published to public cloud monitoring
systems such as AWS® CloudWatch, Azure® Application Insights, and
The firewall natively publishes the following metrics
to monitoring systems in the public cloud such as AWS® CloudWatch,
Azure® Application Insights, and Google® Stackdriver. These metrics
allow you to assess firewall performance and usage patterns so that
you can set alarms and take action to automate events such as launching
or terminating instances of the VM-Series firewalls. Because these
metrics are published through content updates on the firewall, make
sure that you have the minimum content release version that is required
to enable this capability on your VM-Series firewall.
Dataplane CPU Utilization (%)
Monitors dataplane CPU usage and measures
the traffic load on the firewall.
Dataplane Packet Buffer Utilization (%)
Monitors dataplane buffer usage and measures
buffer utilization. If you have a sudden burst in traffic, monitoring your
buffer utilization allows you to ensure that the firewall does not
deplete the dataplane buffer, which results in dropped packets.
GlobalProtect™ Gateway Active Tunnels
Monitors the number of active
GlobalProtect sessions on a firewall deployed as a GlobalProtect
gateway. Use this metric if you use this VM-Series firewall as a
VPN gateway to secure remote users. Check the datasheet for the
maximum number of active tunnels supported for your firewall model.
GlobalProtect Gateway Tunnel Utilization (%)
Monitors the active GlobalProtect tunnels
on a gateway and measures tunnel utilization. Use this metric if you
use this VM-Series firewall as a VPN gateway to secure remote users.
Monitors the total number of sessions that
are active on the firewall. An active session is a session that
is in the flow lookup table for which packets will be inspected
and forwarded, as required by policy.
Session Utilization (%)
Monitors the TCP, UDP, ICMP and SSL sessions
that are currently active and the packet rate, new connection establish
rate, and firewall throughput to determine session utilization.
Monitors the percentage of SSL forward proxy sessions
with clients for SSL/TLS decryption.