Перейти к содержимому

Palo Alto Monitor Tab Explained Logs Filters & Troubleshooting Part 3

PacketBaba

0:00 / 0:00

Palo Alto Monitor Tab Explained Logs Filters & Troubleshooting Part 3

29 просмотров · 13 дн. назад
PacketBaba
33 подписчика
29 просмотров · 13 дн. назад
In this video we go through every section of the Palo Alto web interface Monitor tab and learn how to read firewall logs like an engineer. You will learn: Monitor vs ACC: summary vs evidence All log types: Traffic, Threat, URL Filtering, WildFire, Data Filtering, Authentication, User-ID, IP-Tag, HIP Match, GlobalProtect, Tunnel Inspection, Decryption, Alarms, Configuration, System, Unified Traffic log columns, Action and Session End Reason Filters, the filter builder and the detailed log view Choosing columns (Dynamic Address Group, Dynamic User Group, SDWAN) Why you can't see your traffic in the log Resolve Hostname and Highlight Policy Actions App Scope, Session Browser, Packet Capture, Botnet, IoT Devices PDF Reports, Manage Custom Reports, Reports, Correlation Engine 3 real troubleshooting examples and 5 tips Chapters: 0:00 Intro 0:22 What is the Monitor tab? 0:45 The screen 1:15 Log types 1:36 Users and connections logs 2:10 Firewall logs: Configuration, System, Unified 2:28 Traffic log columns 3:02 Action 3:24 Session End Reason 4:02 Filters 4:34 Filter builder 5:04 Detailed log view 5:40 Choose your columns 6:08 "I can't see my traffic" 6:45 Resolve Hostname and Highlight Policy Actions 7:08 Threat log 7:43 Configuration log 8:15 System log 8:39 Unified log 8:57 App Scope 9:32 Session Browser 9:45 Packet Capture 10:03 Botnet 10:20 IoT Devices 10:33 PDF Reports 11:02 Reports and Custom Reports 11:20 Correlation Engine 11:36 3 real examples 12:24 Tips 12:53 Summary Next video: Policies tab and security rules. Interface visuals are illustrations with fictional data. Unofficial educational channel, not affiliated with Palo Alto Networks. #PaloAlto #PaloAltoNetworks #Firewall #NetworkSecurity #PANOS #PCNSA #CyberSecurity