Strata Cloud Manager
Insights: Activity Insights
Table of Contents
Expand All
|
Collapse All
Strata Cloud Manager Docs
-
- Strata Copilot
- Command Center: Strata Cloud Manager
-
- Dashboard: Build a Custom Dashboard
- Dashboard: Executive Summary
-
- WildFire Dashboard: Filters
- WildFire Dashboard: Total Samples Submitted
- WildFire Dashboard: Analysis Insights
- WildFire Dashboard: Session Trends For Samples Submitted
- WildFire Dashboard: Verdict Distribution
- WildFire Dashboard: Top Applications Delivering Malicious Samples
- WildFire Dashboard: Top Users Impacted By Malicious Samples
- WildFire Dashboard: Top Malware Regions
- WildFire Dashboard: Top Firewalls
- Dashboard: DNS Security
- Dashboard: AI Runtime Security
- Dashboard: IoT Security
- Dashboard: Prisma Access
-
- Application Experience Dashboard: Mobile User Experience Card
- Application Experience Dashboard: Remote Site Experience Card
- Application Experience Dashboard: Experience Score Trends
- Application Experience Dashboard: Experience Score Across the Network
- Application Experience Dashboard: Global Distribution of Application Experience Scores
- Application Experience Dashboard: Experience Score for Top Monitored Sites
- Application Experience Dashboard: Experience Score for Top Monitored Apps
- Application Experience Dashboard: Application Performance Metrics
- Application Experience Dashboard: Network Performance Metrics
- Dashboard: Best Practices
- Dashboard: Compliance Summary
-
- Prisma SD-WAN Dashboard: Device to Controller Connectivity
- Prisma SD-WAN Dashboard: Applications
- Prisma SD-WAN Dashboard: Top Alerts by Priority
- Prisma SD-WAN Dashboard: Overall Link Quality
- Prisma SD-WAN Dashboard: Bandwidth Utilization
- Prisma SD-WAN Dashboard: Transaction Stats
- Prisma SD-WAN Dashboard: Predictive Analytics
- Dashboard: PAN-OS CVEs
- Dashboard: CDSS Adoption
- Dashboard: Feature Adoption
- Dashboard: On Demand BPA
- Manage: IoT Policy Recommendation
- Manage: Enterprise DLP
- Manage: SaaS Security
- Manage: Prisma Access Browser
- Reports: Strata Cloud Manager
-
-
- Strata Cloud Manager Release Information
-
- New Features in February 2025
- New Features in January 2025
- New Features in December 2024
- New Features in November 2024
- New Features in October 2024
- New Features in September 2024
- New Features in August 2024
- New Features in July 2024
- New Features in June 2024
- New Features in May 2024
- New Features in April 2024
- New Features in March 2024
- New Features in February 2024
- New Features in January 2024
- New Features in November 2023
- New Features in October 2023
- New Features in September 2023
- Known Issues
- Addressed Issues
- Getting Help
Insights: Activity Insights
Activity Insights gives you an in-depth view of your network activities across Prisma Access and NGFW deployments.
Where Can I Use This? | What Do I Need? |
---|---|
|
Each of these licenses include access to Strata Cloud Manager:
The other licenses and prerequisites needed to access certain
Activity Insights views are:
→ The features and capabilities available to you in Strata Cloud Manager depend on which license(s) you are
using.
|
Activity Insights gives you an in-depth view of your network activities across Prisma Access and NGFW deployments. This view unifies your network data such as
network traffic, application usage, threats, and user activities in one place. Activity
Insights provides visualization, monitoring, and reporting capabilities to you carry out
your tasks
easily. Once you have
identified the areas that need your focus with the Strata Cloud Manager Command
Center, use the context links to navigate to Activity Insights or other
dashboards for further analysis.Activity Insights has advanced filters to help you focus on the security aspects that
matter to your deployment. The advanced reporting functionality in Activity Insights enables
you to download, share, and schedule reports from the data in the Overview tab. The
report presents data separately for each filter applied in the dashboard. Alternatively,
you can schedule reports for Activity Insights and dashboards from the Strata Cloud ManagerReports menu.
What does Activity Insights show you?
Activity Insights shows aggregated data per Strata Logging Service
tenant deployed in Prisma Access and NGFW environments. You can filter the data
for a specific deployment. Activity Insights has different tabs. Each of these tabs
provides an unified view of network data in relation to applications, users,
threats, URLs, and network usage.
- Overview—Displays the data for applications, threats, users, URLs, and sessions with the maximum number of activities involved within the selected time range. Glance through this view to quickly identify any irregularities within your network and then delve deeper to examine the activities that require investigation.
- Applications—Provides an overview of all the application usage in the network, including data transfer, application risks and ADEM capabilities to monitor application experience.
- SD-WAN Applications—Displays the performance of Prisma SD-WAN applications with details on health score over a time range, transaction statistics, and bandwidth utilization metrics.
- Threats—Provides a holistic view of all threats that the Palo Alto Networks security services detected and blocked in your network.
- Users—Provides deeper insights into a user’s traffic and activities, including ADEM’s capabilities to monitor user experience.
- URLs—Displays the URLs accessed in your network, how many of them are malicious, users and applications accessing the URLs, rules allowing the URLs in your network, and enforcement by your security services.
- Rules—Provides insights on the security policy rules permitting the traffic generated by users and applications, threats detected in the traffic sessions, and URLs impacting the rule.
- Regions—Displays the network traffic details in relation to applications, users, threats, and URLs.
- Projects—Gain visibility into your Prisma Access Agent deployment by using Strata Cloud Manager to monitor your Dynamic Privilege Access project activity.
How can you use the data from the dashboard?
Here are some ways the findings can be beneficial:
- Identify the applications you want to monitor, improve the user experience of the applications with low scores, and control unsanctioned and risky applications.
- View the most relevant threats to your deployment and get context on the threats for investigation.
- Refine your Security policy rules and traffic rules based on your findings from the logs to close the security gaps.
- Monitor the user activity to detect and stop potential threats and protect misuse of sensitive information.