Panorama Interfaces Test

An interface serves as a crucial link between the Panorama and the managed firewalls. Monitoring the interfaces ensures that connectivity remains stable, allowing the target panorama to collect logs, and manage devices effectively.

This test monitors various statistics of interest for each interface of a Panorama. This test alerts the administrator whenever any abnormal activity is detected on any of the target Palo Alto Panorama interfaces.

Target of the test: Palo Alto Panorama

Agent deploying the test: A Remote Agent

Outputs of the test: One set of results for each interface in the Palo Alto Panorama that is being monitored.

Configurable parameters for the test

Parameter

Description

Test period

How often should the test be executed.

Host

The IP address of the target host to be monitored.

Port

Specify the port at which the specified host listens to.

API Key

The eG agent collects the required metrics from the target Palo Alto Panorama by executing API commands using XML API and pulls out critical metrics. In order to collect metrics, the eG agent should be provided with a valid API key.

SSL

By default, this flag is set to Yes indicating that the SSL (Secured Socket Layer) is used to connect to the target Palo Alto Panorama. If not so, set the SSL flag to No .

Measurements made by the test

Measurement

Description

Measurement Unit

Interpretation

Status

Indicates whether/not this interface is up.

 

The values reported by this measure and its numeric equivalent are mentioned in the table below:

Measure Value Numeric Value
Down 0
Up 1

Note:

By default, this measure reports the above-mentioned Measure Values while indicating the status of the interface in the target Palo Alto Panorama. However, in the graph of this measure, states will be represented using the corresponding numeric equivalents only - i.e., 0 or 1.

Data transmitted

Indicates the rate of data transmitted by the router over this interface.

KBPS

This value is an indicator of the instantaneous traffic transmitted over this interface.

Data received

Indicates the rate of data received by the router over this interface.

KBPS

This value is an indicator of the instantaneous traffic received over this interface.

Broadcast packets transmitted

Indicates the rate at which broadcast packets were sent by this interface.

Packets/sec

Broadcast is the term used to describe communication where a piece of information is sent from one point to all other points. In this case there is just one sender, but the information is sent to all connected receivers.

Broadcast packets received

Indicates the rate at which broadcast packets were received by this interface.

Packets/sec

Unicast packets transmitted

Indicates the rate at which unicast packets were sent by this interface.

Packets/sec

Unicast is the term used to describe the communication that involves sending data from one point in the network to another point, with only one sender and one receiver involved.

 

Unicast packets received

Indicates the rate at which unicast packets were received by this interface.

Packets/sec

Multicast packets received

Indicates the rate at which multicast packets were received by this interface.

Packets/sec

Multicast is the term used to describe communication where a piece of information is sent from one or more points to a set of other points. In this case there is may be one or more senders, and the information is distributed to a set of receivers (there may be no receivers, or any other number of receivers).

Packets transmitted

Indicates the rate at which data packets were transmitted by this interface.

Packets/sec

 

Packets received

Indicates the rate at which data packets were received by this interface.

Packets/sec

 

Received errors

Indicates the number of errors received in the interface.

Number

Ideally, the value of this measure should be 0.

Received drops

Indicates the number of drops in the interface.

Number

This measure refers to instances where packets are not successfully processed or forwarded by the firewall.

Ideally, the value of this measure should be 0.