Focus

VM-Series Deployment Guide

Custom PAN-OS Metrics Published for Monitoring

Table of Contents

Custom PAN-OS Metrics Published for Monitoring

PAN-OS® metrics published to public cloud monitoring systems such as AWS® CloudWatch, Azure® Application Insights, and Google® Stackdriver.

The firewall natively publishes the following metrics to monitoring systems in the public cloud such as AWS® CloudWatch, Azure® Application Insights, and Google® Stackdriver. These metrics allow you to assess firewall performance and usage patterns so that you can set alarms and take action to automate events such as launching or terminating instances of the VM-Series firewalls. Because these metrics are published through content updates on the firewall, make sure that you have the minimum content release version that is required to enable this capability on your VM-Series firewall.

Metric	Description
Dataplane CPU Utilization (%)	Monitors dataplane CPU usage and measures the traffic load on the firewall.
Dataplane Packet Buffer Utilization (%)	Monitors dataplane buffer usage and measures buffer utilization. If you have a sudden burst in traffic, monitoring your buffer utilization allows you to ensure that the firewall does not deplete the dataplane buffer, which results in dropped packets.
GlobalProtect™ Gateway Active Tunnels	Monitors the number of active GlobalProtect sessions on a firewall deployed as a GlobalProtect gateway. Use this metric if you use this VM-Series firewall as a VPN gateway to secure remote users. Check the datasheet for the maximum number of active tunnels supported for your firewall model.
GlobalProtect Gateway Tunnel Utilization (%)	Monitors the active GlobalProtect tunnels on a gateway and measures tunnel utilization. Use this metric if you use this VM-Series firewall as a VPN gateway to secure remote users.
panSessionConnectionsPerSecond	Monitors the new connection establish rate per second.
panSessionThroughputKbps	Monitors the throughput in Kbps.
panSessionThroughputPps	Monitors the number of packets per second.
Sessions Active	Monitors the total number of sessions that are active on the firewall. An active session is a session that is in the flow lookup table for which packets will be inspected and forwarded, as required by policy.
Session Utilization (%)	Monitors the TCP, UDP, ICMP and SSL sessions that are currently active and the packet rate, new connection establish rate, and firewall throughput to determine session utilization.
SSLProxyUtilization (%)	Monitors the percentage of SSL forward proxy sessions with clients for SSL/TLS decryption.

To publish these metrics, see:

Hypervisor Assigned MAC Addresses

Interface Used for Accessing External Services on the VM-Series Firewall