Manage Historical Device Telemetry
For PAN-OS 10.0, support for prior telemetry data collection is reduced.
Prior to 10.0, telemetry data was mostly of interest for threat intelligence purposes. As of
10.0, threat intelligence metrics are still a large portion the data collected by the
device, but a great deal more data involving the health, performance, and configuration
of the device is collected as well.
If you have an existing next-generation firewall, and you have any of the historical
telemetry data categories enabled, then when you upgrade to PAN-OS 11.1 your firewall will
continue to collect and share this information. If you want to turn this telemetry data
sharing off, use the following CLI commands:
set deviceconfig system update-schedule statistics-service application-reports no
set deviceconfig system update-schedule statistics-service threat-prevention-reports no
set deviceconfig system update-schedule statistics-service threat-prevention-information no
set deviceconfig system update-schedule statistics-service threat-prevention-pcap no
set deviceconfig system update-schedule statistics-service passive-dns-monitoring no
set deviceconfig system update-schedule statistics-service url-reports no
set deviceconfig system update-schedule statistics-service health-performance-reports no
set deviceconfig system update-schedule statistics-service file-identification-reports no
If you have a 11.1 firewall and this telemetry sharing is turned off, but you want to share
this data with Palo Alto Networks, then you can turn it on using:
set deviceconfig system update-schedule statistics-service application-reports yes
set deviceconfig system update-schedule statistics-service threat-prevention-reports yes
set deviceconfig system update-schedule statistics-service threat-prevention-information yes
set deviceconfig system update-schedule statistics-service threat-prevention-pcap yes
set deviceconfig system update-schedule statistics-service passive-dns-monitoring yes
set deviceconfig system update-schedule statistics-service url-reports yes
set deviceconfig system update-schedule statistics-service health-performance-reports yes
set deviceconfig system update-schedule statistics-service file-identification-reports yes
You can see whether your device is collecting and sharing this historical telemetry
data using the following CLI command:
show deviceconfig system update-schedule statistics-service
