Select Panorama >
Managed WildFire Clusters to display the following information for each managed cluster (you can also select standalone appliances from this page and display their information) or select
Panorama >
Managed WildFire Appliances to display the information for standalone appliances.
|
|
|
|
|
|
(Managed WildFire Appliances view only)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
•
|
Controller—The appliance is the cluster Controller node.
|
|
•
|
Worker—The appliance is a Worker node in the cluster.
|
|
|
|
|
•
|
In Sync—The appliance configuration is in sync with its saved configuration on Panorama.
|
|
•
|
Out of Sync—The appliance configuration is not in sync with its saved configuration on Panorama. You can mouse over the eyeglass to display the cause of the sync failure.
|
|
(Managed WildFire Clusters page only)
|
|
◦
|
wfpc (WildFire Private Cloud)—The malware sample analysis and reporting service.
|
|
◦
|
signature—The local signature generation service.
|
|
◦
|
Operations—Status for decommission, suspend, and reboot operations.
|
|
◦
|
Progress status—Operation status notifications are the same for each operation: requested, ongoing, denied, success, or fail.
|
|
◦
|
Cluster— cluster:offline or cluster:splitbrain.
|
|
◦
|
Service— service:suspended or service:none.
|
|
|
|
Commit succeeded if the most recent commit succeeded or commit failed if the most recent commit failed. View details about the last commit by selecting the state.
|
|
|
|
|
View cluster or appliance utilization statistics. You can view only individual appliances ( Panorama > Managed WildFire Appliances) or you can view only cluster statistics ( Panorama > Managed WildFire Clusters).
|
•
|
Appliance—( Standalone appliance view only) The appliance serial number.
|
|
•
|
Cluster—( Cluster view only) The cluster name. You can also select a different cluster to view.
|
|
•
|
Duration—Displays the time period for which statistics are collected and displayed. You can select different durations:
|
The Utilization View has four tabs and, on each tab, you determine what is displayed based on your configured Duration.
|
|
|
The General tab displays aggregated resource utilization statistics for a cluster or an appliance. The other tabs display more granular information about resource utilization by file type:
|
•
|
Verdict—The Total number of verdicts, the number of each verdict type assigned to files— Malware, Grayware, and Benign; and how many verdicts were Error verdicts.
|
|
•
|
Sample Statistics—The total number of samples Submitted and Analyzed and how many samples are Pending analysis.
|
|
◦
|
File Type Analyzed—The type of file that was analyzed— Executable, Non-Executable, or Links.
|
|
◦
|
Virtual Machine Usage—The number of virtual machines used for each file type analyzed and how many virtual machines are available to analyze each file type. For example, for Executable files, VM usage could be 6/10 (six VMs used and ten VMs available).
|
|
|
|
The Executable, Non-Executable, and Links display similar information about each type of file:
|
•
|
Verdict—Details about verdicts by file type. You can filter the results:
|
|
◦
|
Search box—Enter search terms to filter the verdicts. The search box indicates the number of file types (items) in the list. After you enter search terms, apply the filter (  ) or clear the filter (  ) and enter a different set of terms.
|
|
◦
|
File Type—List files by type. For example, the Executable tab displays .exe and .dll file types; the Non-Executable tab displays .pdf, .jar, .doc, .ppt, .xls, .docx, .pptx, .xlsx, .rtf, class, and .swf file types; and the Links tab displays elink file type information.
|
|
◦
|
For each File Type, the total number of verdicts for Malware, Grayware, and Benign files, the number of Error verdicts, and the Total number of verdicts are displayed on each tab.
|
|
◦
|
For each File Type, the total number of files Submitted for analysis, the total number Analyzed, and the number Pending analysis are displayed on each tab.
|
|
|
|
|
|
View information about the firewalls connected to the cluster or the appliance. You can view only individual appliances ( Panorama > Managed WildFire Appliances) or you can view only cluster statistics ( Panorama > Managed WildFire Clusters).
|
•
|
Appliance—( Standalone appliance view only) The appliance serial number.
|
|
•
|
Cluster—( Cluster view only) The cluster name, you can also select a different cluster to view.
|
|
|
|
The Registered tab displays information about firewalls registered to the cluster or appliance, regardless of whether the firewalls are submitting samples.
The Submitting Samples tab displays information about firewalls that are actively submitting samples to the WildFire cluster or appliance.
|
•
|
Search box—Enter search terms to filter the list of firewalls. The search box indicates the number of firewalls (items) in the list. After you enter search terms, apply the filter ( ) or clear the filter ( ) and enter a different set of terms.
|
|
•
|
S/N—The serial number of the firewall.
|
|
•
|
Model—The model number of the firewall.
|
|