Panorama Traffic Test

This test continuously monitors the traffic events in a session in Palo Alto Panorama, and reports the number of applications logged by each traffic event. Using this test, administrators can be aware of sessions that were terminated, the reason for terminations, and the action taken.

Target of the test: Palo Alto Panorama

Agent deploying the test: A Remote Agent

Outputs of the test: One set of results for each traffic event in the Palo Alto Panorama that is being monitored.

Configurable parameters for the test

Parameter

Description

Test period

How often should the test be executed.

Host

The IP address of the target host to be monitored.

Port

Specify the port at which the specified host listens to.

API Key

The eG agent collects the required metrics from the target Palo Alto Panorama by executing API commands using XML API and pulls out critical metrics. In order to collect metrics, the eG agent should be provided with a valid API key.

SSL

By default, this flag is set to Yes indicating that the SSL (Secured Socket Layer) is used to connect to the target Palo Alto Panorama. If not so, set the SSL flag to No .

Detailed Diagnosis

To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability
  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.
Measurements made by the test

Measurement

Description

Measurement Unit

Interpretation

Recent application logs

Indicates the number of application logs generated during the last frequency period in this traffic event.

Number

The detailed diagnosis of this measure lists the source address of the session, data, filename, application name, source/destination address, source/destination port, and the reason why the session was terminated.

Total traffic

Indicates the amount of data transmitted and received in this traffic event.

KB