Palo Alto Monitor Tab Explained Logs Filters & Troubleshooting Part 3
PacketBaba
0:00 / 0:00
Palo Alto Monitor Tab Explained Logs Filters & Troubleshooting Part 3
29 просмотров · 13 дн. назад
PacketBaba
33 подписчика
29 просмотров · 13 дн. назад
In this video we go through every section of the Palo Alto web interface Monitor tab and learn how to read firewall logs like an engineer.
You will learn:
Monitor vs ACC: summary vs evidence
All log types: Traffic, Threat, URL Filtering, WildFire, Data Filtering, Authentication, User-ID, IP-Tag, HIP Match, GlobalProtect, Tunnel Inspection, Decryption, Alarms, Configuration, System, Unified
Traffic log columns, Action and Session End Reason
Filters, the filter builder and the detailed log view
Choosing columns (Dynamic Address Group, Dynamic User Group, SDWAN)
Why you can't see your traffic in the log
Resolve Hostname and Highlight Policy Actions
App Scope, Session Browser, Packet Capture, Botnet, IoT Devices
PDF Reports, Manage Custom Reports, Reports, Correlation Engine
3 real troubleshooting examples and 5 tips
Chapters:
0:00 Intro
0:22 What is the Monitor tab?
0:45 The screen
1:15 Log types
1:36 Users and connections logs
2:10 Firewall logs: Configuration, System, Unified
2:28 Traffic log columns
3:02 Action
3:24 Session End Reason
4:02 Filters
4:34 Filter builder
5:04 Detailed log view
5:40 Choose your columns
6:08 "I can't see my traffic"
6:45 Resolve Hostname and Highlight Policy Actions
7:08 Threat log
7:43 Configuration log
8:15 System log
8:39 Unified log
8:57 App Scope
9:32 Session Browser
9:45 Packet Capture
10:03 Botnet
10:20 IoT Devices
10:33 PDF Reports
11:02 Reports and Custom Reports
11:20 Correlation Engine
11:36 3 real examples
12:24 Tips
12:53 Summary
Next video: Policies tab and security rules.
Interface visuals are illustrations with fictional data. Unofficial educational channel, not affiliated with Palo Alto Networks.
#PaloAlto #PaloAltoNetworks #Firewall #NetworkSecurity #PANOS #PCNSA #CyberSecurity