Activity Insights gives you an in-depth view of your network activities across Prisma
Access and NGFW deployments.
Activity Insights gives you an in-depth
view of your network activities across Prisma Access and NGFW deployments. Activity
Insights brings together the visualization, monitoring, and reporting capabilities
from these dashboards and provides all this data to
you in a single, consolidated view.
Dashboards > Application Usage
Dashboards > Network Usage
Dashboards > User Activity
Dashboards > Threat Insights
Monitor > Users
Monitor >Applications
Activity Insights pairs with the new Strata Cloud Manager Command Center
homepage ; for anomalies, security gaps, degraded user experiences, impacts on
security and health of your network that the homepage surfaces, you can drill down
into Activity Insights and other dashboards to investigate and assess next
steps.
Activity Insights has these different tabs.
Overview
Applications
SD-WAN Applications
Threats
Users
URLs
Rules
Regions
Each of these tabs provides a unified view of network data in relation to
applications, users, threats, URLs, and network usage. You can also view the
performance of Prisma SD-WAN applications with details on health score over a time
range, transaction statistics, and bandwidth utilization metrics. The dashboard has
advanced filters on these tabs to help you focus on the security aspects that matter
to your deployment.
The advanced reporting functionality enables you to download, share, and schedule
reports that cover the data in the Overview tab. The report presents data
separately for each filter applied in Activity Insights.
Update:
The Users tab in Activity Insights(Activity InsightsUsersAll Users/Hosts) now displays “direct” users who connect to your network
infrastructure while disconnected from GlobalProtect™. Previously, ADEM collected
and displayed event information for these users in Application
Experience, but Activity Insights did not
show these users in its dashboards. Now, administrators will see direct users in the
Users tab table, providing complete visibility into
network activity regardless of GlobalProtect connection status.