What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags

View all Tags




Hi, I would like to know which sensors are recommended and which ones can be used to monitor a PaloAlto firewall. I hope the answer in advance thank you very much

netflow palo-alto-networks sensor

Created on Apr 3, 2017 9:20:49 PM

2 Replies




Thank you for your KB-Post. I'm very sorry, we do not have native Palo Alto Sensors as of now in PRTG, and also no "official guides on how to monitor them". We do have one user here in the KB with a suggestion to use HTTP XML Rest Sensors to monitor Palo Alto Devices. I hope this works for you just as well.
Otherwise if your devices "speak SNMP", please check if there are any MIB files that you can import with our MIB-Importer. If so, you can monitor the target with the "SNMP Library Sensor".

Created on Apr 5, 2017 1:41:20 PM by  Torsten Lindner [Paessler Support]



If you have access to their forums/discussions, this link may help: https://live.paloaltonetworks.com/t5/Tech-Note-Articles/PAN-OS-Netflow-Templates-and-Field-Types-PAN-OS-5-0/ta-p/54223

PAN-OS can generate and export Netflow Version 9 records with unidirectional IP traffic flow information to an outside
collector. Netflow export can be enabled on any ingress interface in the system. Separate template records are defined for
IPv4, IPv4 with NAT, and IPv6 traffic, and PAN-OS specific (enterprise specific) fields for App-ID and User-ID can be
optionally exported. This feature is available on all platforms, except the PA-4000 Series. For more information about
Netflow, refer to the Palo Alto Networks Administrator’s Guide.
To configure Netflow data exports, define a Netflow server profile, which specifies the frequency of the export along with
the Netflow servers that will receive the exported data. When you assign the profile to an existing firewall interface, all
traffic flowing over that interface is exported to the specified servers. All interface types support assignment of a Netflow
The following tables provide the details of the templates supported including the values, field types, and descriptions for all
the elements in the templates. Templates listed as “Enterprise” include all the field types of the corresponding
“Standard” template, and [Enterprise] additionally include PAN-OS specific fields for App-ID and User-ID.
• IPv4 Traffic Templates
o Template ID 256 – IPv4 Standard
o Template ID 257 – IPv4 Enterprise
• IPv4 with NAT Traffic Templates
o Template ID 260 – IPv4 with NAT Standard
o Template ID 261 – IPv4 with NAT Enterprise
• IPv6 Traffic Templates
o Template ID 258 – IPv6 Standard
o Template ID 259 – IPv6 Enterprise

Created on Feb 4, 2018 2:00:22 AM

Last change on Feb 5, 2018 8:17:47 AM by  Torsten Lindner [Paessler Support]

Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.