Skip to technology filters Skip to main content
Dynatrace Hub

Extend the platform,
empower your team.

Popular searches:
Home hero bg
Palo Alto firewallsPalo Alto firewalls
Palo Alto firewalls

Palo Alto firewalls

Palo Alto extension for problems detection

Extension
Free trialDocumentation
  • Product information
  • Release notes

Overview

This extension leverages the SNMP protocol to provide a complete solution to monitor your Palo Alto Firewalls. The complete configuration is provided out-of-the-box.

This is intended for users, who:

  • Would like to monitor health state and performance of their Palo Alto Firewalls and provide unified analysis for Ops, DevOps and IT Admins.

This enables you to:

  • Monitor health and performance of your Palo Alto Firewalls
  • Use included alerts for fan speed, as well as temperature.

Use cases

Monitor health state and performance of your Palo Alto firewalls and provide unified analysis for Ops, DevOps and IT Admins.

Get started

Simply activate the extension in your environment using in-product Hub, provide the device configuration and you’re all set up.

Read more in the SNMP Extension Documentation

Details

This extension is built on top of the new Extension 2.0 Framework.

The extension package contains:

  • SNMP DataSource configuration,
  • dashboard template,
  • Unified Analysis screen template,
  • topology definition and entity extraction rules for Palo Alto Firewalls, Interfaces, and Virtual Systems.

More information can be found in the Product News Blog:

  • Simplified observability for your SNMP devices

Compatibility information

  • This extension is to be used with Palo Alto Firewalls only.
  • SNMPv2c and SNMPv3 supported only.

License Consumption

This extension ingests custom metrics which, depending on your licensing model, can either consume DDUs or metrics on your Dynatrace Platform Subscription.

A rough estimate of the number metric timeseries ingested by this extension is given by:

(number of devices * 24) + (number of interfaces * 10) + (number of virtual systems * 3) + (number of sensors across all devices) + (number of memory objects across all devices * 5)

where mem_objects includes disks and RAM slots and sensors corresponds to physical sensors like fan RPM and temperature.

An easier, rougher estimate is given by:

(number of devices * 33) + (number of interfaces * 10)

Troubleshooting

  • To troubleshoot this extension, use the guide(s) in the Dynatrace Community.
Dynatrace
DocumentationMore Information
By Dynatrace
Dynatrace support center
Subscribe to new releases
Copy to clipboard

Extension content

Content typeNumber of items included
alerts
2
screen injections
3
screen layout
6
screen chart groups
18
generic type
7
metric metadata
48
dashboards
1
generic relationship
5
screen properties
4
screen entities lists
2
metric query
3
screen dql table
2

Feature sets

Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual feature sets can be activated and deactivated by your administrator during configuration.

Feature setsNumber of metrics included
Metric nameMetric keyDescriptionUnit
-com.dynatrace.extension.palo-alto.generic.device.entity--
-com.dynatrace.extension.network_device.sysuptime--
-com.dynatrace.extension.network_device.cpu_usage--
System uptimecom.dynatrace.extension.palo-alto.generic.sys.uptime-MilliSecond
CPU Management Plane Utilizationcom.dynatrace.extension.palo-alto.generic.cpu.management.utilization-Percent
CPU System Plane Utilizationcom.dynatrace.extension.palo-alto.generic.cpu.system.utilization-Percent
-com.dynatrace.extension.network_device.memory_total--
-com.dynatrace.extension.network_device.memory_used--
Memory Allocation Unitscom.dynatrace.extension.palo-alto.generic.mem.allocation.unitsThe size in bytes of the data objects allocated from this pool.Byte
Memory Sizecom.dynatrace.extension.palo-alto.generic.mem.size-Byte
Memory Usedcom.dynatrace.extension.palo-alto.generic.mem.used-Byte
Memory Allocation Failurescom.dynatrace.extension.palo-alto.generic.mem.allocation.failures.countThe number of requests for storage represented by this entry that could not be honored due to not enough storage.Count
Metric nameMetric keyDescriptionUnit
Total Power Available (Watts)com.dynatrace.extension.palo-alto.generic.power.available-Count
Total Power Used (Watts)com.dynatrace.extension.palo-alto.generic.power.used-Count
Sensor Valuecom.dynatrace.extension.palo-alto.generic.sensor.valueentPhySensorValue objects, represent fan speed and temperature.Unspecified
Metric nameMetric keyDescriptionUnit
System Userscom.dynatrace.extension.palo-alto.generic.sys.host.num_usersThe number of user sessions for which this host is storing state information. hrSystemNumUsersCount
System Processescom.dynatrace.extension.palo-alto.generic.sys.host.num_processesThe number of process contexts currently loaded or running on this system. hrSystemProcessesCount
System Max Processescom.dynatrace.extension.palo-alto.generic.sys.host.max_processesThe maximum number of process contexts this system can support. hrSystemMaxProcessesCount
Load Average 1mincom.dynatrace.extension.palo-alto.generic.sys.host.load_averageThe 1 minute load average. laLoadCount
Metric nameMetric keyDescriptionUnit
Zone Other IP connections per secondcom.dynatrace.extension.palo-alto.generic.zone.active.tcp.cpsNumber of active Other IP connections per second for this zone. panZoneActiveTcpCps - PAN-COMMON-MIBPerSecond
Zone UDP connections per secondcom.dynatrace.extension.palo-alto.generic.zone.active.udp.cpsNumber of active UDP connections per second for this zone. panZoneActiveUdpCps - PAN-COMMON-MIBPerSecond
Zone UDP connections per secondcom.dynatrace.extension.palo-alto.generic.zone.active.otherip.cpsNumber of active UDP connections per second for this zone. panZoneActiveOtherIpCps - PAN-COMMON-MIBPerSecond
Metric nameMetric keyDescriptionUnit
Sys release date infocom.dynatrace.extension.palo-alto.generic.sys.release.datesDimensions: panSysSwVersion panSysAppVersion, panSysAppReleaseDate, panSysThreatVersion, panSysThreatReleaseDate, panSysAvVersion, panSysAvReleaseDate, panSysWildfireVersion, panSysWfReleaseDate, panSysUrlFilteringVersion, panSysHAState, panSysHAPeerState, chassis.type . PAN-COMMON-MIBPerSecond
Metric nameMetric keyDescriptionUnit
PAN LC Log Ratecom.dynatrace.extension.palo-alto.generic.lc.log_rateThe write rate in logs/s on the Log Collection.PerSecond
PAN LC Disk Usagecom.dynatrace.extension.palo-alto.generic.lc.disk_usageThe Log disk usage for logical disks on the Log CollectorPercent
PAN LC Log Durationcom.dynatrace.extension.palo-alto.generic.lc.log_durationThe Log duration (in days) for the logs on the Log CollectorDay
Metric nameMetric keyDescriptionUnit
VSYS - Max Sessionscom.dynatrace.extension.palo-alto.generic.vsys.sessions.max-Count
VSYS - Active Sessionscom.dynatrace.extension.palo-alto.generic.vsys.sessions.active-Count
VSYS - Session Utilizationcom.dynatrace.extension.palo-alto.generic.vsys.sessions.utilization-Percent
Metric nameMetric keyDescriptionUnit
Incoming log ratecom.dynatrace.extension.palo-alto.generic.pandeviceincominglograteThe incoming rate in logs/s on the Device. PAN-COMMON-MIBPerSecond
Write log ratecom.dynatrace.extension.palo-alto.generic.pandevicewritelograteThe write rate in logs/s on the Device. PAN-COMMON-MIBPerSecond
Metric nameMetric keyDescriptionUnit
-com.dynatrace.extension.network_device.if.bytes_in.count--
-com.dynatrace.extension.network_device.if.bytes_out.count--
-com.dynatrace.extension.network_device.if.status--
-com.dynatrace.extension.palo-alto.generic.if.entity--
Interface Incoming Octets Countcom.dynatrace.extension.palo-alto.generic.if.in.octets.count-Count
Interface Incoming Ucast Packets Countcom.dynatrace.extension.palo-alto.generic.if.in.ucast.packets.count-Count
Interface Outgoing Octets Countcom.dynatrace.extension.palo-alto.generic.if.out.octets.count-Count
Interface Outgoing Packets Countcom.dynatrace.extension.palo-alto.generic.if.out.ucast.packets.count-Count
Interface Incoming Errorscom.dynatrace.extension.palo-alto.generic.if.in.err.count-Count
Interface Outgoing Errorscom.dynatrace.extension.palo-alto.generic.if.out.err.count-Count
Interface Incoming Discardscom.dynatrace.extension.palo-alto.generic.if.in.discards.count-Count
Interface Outgoing Discardscom.dynatrace.extension.palo-alto.generic.if.out.discards.count-Count
Metric nameMetric keyDescriptionUnit
Active Tunnelscom.dynatrace.extension.palo-alto.generic.tunnels.active-Count
Max Tunnelscom.dynatrace.extension.palo-alto.generic.tunnels.max-Count
Gateway Utilization %com.dynatrace.extension.palo-alto.generic.gateway.utilization-Percent
Active Sessionscom.dynatrace.extension.palo-alto.generic.sessions.active-Count
Session utilizationcom.dynatrace.extension.palo-alto.generic.sessions.utilizationSession table utilization percentage.Percent
Max Sessionscom.dynatrace.extension.palo-alto.generic.sessions.max-Count
Sessions - TCPcom.dynatrace.extension.palo-alto.generic.sessions.tcp-Count
Sessions - UDPcom.dynatrace.extension.palo-alto.generic.sessions.udp-Count
Sessions - ICMPcom.dynatrace.extension.palo-alto.generic.sessions.icmp-Count
Sessions - SSL Proxycom.dynatrace.extension.palo-alto.generic.sessions.proxy-Count
Session SSL proxy utilizationcom.dynatrace.extension.palo-alto.generic.sessions.proxy.utilSSL proxy Session utilization percentage. panSessionSslProxyUtilization PAN-COMMON-MIBPercent

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.
ReleaseDate

Full version history

Version 2.9.7 (09 May 2025)

✨ New in this version:

  • Added dimensions sw.version and chassis.type to the metric com.dynatrace.extension.palo-alto.generic.sys.release.dates.
  • These dimension values will now show as attributes of the Palo Alto Device entity.

ℹ️ This version requires ActiveGate version 1.290.0 or higher.

Full version history

✨ New in this version:

  • Added dimensions ha.peerstate, app.version, threat.version, av.version, wf.version and urlfiltering.version to the metric com.dynatrace.extension.palo-alto.generic.sys.release.dates. These dimension values will now show as attributes of the Palo Alto Device entity.
  • Added charts for logging metrics to the Palo Alto Device entity screen.

🚀 Improved in this version:

  • The com.dynatrace.extension.network_device.sysuptime and com.dynatrace.extension.palo-alto.generic.sys.uptime now represent the time since the device was started (OID 1.3.6.1.2.1.25.1.1.0) as opposed to the time since the SNMP service was started (OID 1.3.6.1.2.1.1.3.0).

ℹ️ This version requires ActiveGate version 1.290.0 or higher.

Full version history

🚀 Improved in this version:

  • To better control licensing costs the following changes have been made to the extension's feature sets:
    • The generic interface metrics were moved from the default feature set to interface.
    • Added new feature set hardware to which the power consumption and sensor metrics were moved.
      • ⚠️ When automatically upgrading existing configurations, the new feature set will be disabled by default. To continue monitoring power consumption and sensor metrics you will need to manually update each monitoring configuration and enable the new feature set after upgrading. ⚠️
  • Added a status dimension to the com.dynatrace.extension.palo-alto.generic.cpu.system.utilization and com.dynatrace.extension.palo-alto.generic.cpu.management.utilization metrics corresponding to OID 1.3.6.1.2.1.25.3.2.1.5.

🪲 Fixed in this version:

  • Fixed bug where interface attributes would sometimes not be populated.

ℹ️ This version requires ActiveGate version 1.290.0 or higher.

Full version history

✨ New in this version:

  • Added power usage metrics com.dynatrace.extension.palo-alto.generic.power.available and com.dynatrace.extension.palo-alto.generic.power.used and corresponding charts as part of the general feature set.
  • Added metrics com.dynatrace.extension.palo-alto.generic.gateway.utilization, com.dynatrace.extension.palo-alto.generic.sessions.utilization, com.dynatrace.extension.palo-alto.generic.sessions.proxy as part of the gateway feature set.
  • Added interface packet metrics com.dynatrace.extension.palo-alto.generic.if.in.ucast.packets.count and com.dynatrace.extension.palo-alto.generic.if.out.ucast.packets.count and corresponding charts as part of the interface feature set.
  • Added metrics com.dynatrace.extension.palo-alto.generic.mem.allocation.units and com.dynatrace.extension.palo-alto.generic.mem.allocation.failures.count as part of the memory feature set.
  • Added a new feature set zone with metrics com.dynatrace.extension.palo-alto.generic.zone.active.tcp.cps, com.dynatrace.extension.palo-alto.generic.zone.active.udp.cps and com.dynatrace.extension.palo-alto.generic.zone.active.otherip.cps.
  • Added a new feature set device-logging with metrics com.dynatrace.extension.palo-alto.generic.pandeviceincominglograte and com.dynatrace.extension.palo-alto.generic.pandevicewritelograte.
  • Added a new feature set pan-sys with the metric com.dynatrace.extension.palo-alto.generic.sys.release.dates.
  • New entities and metrics were added to represent Palo Alto as a network device

🚀 Improved in this version:

  • Changed the interface speed dimension to use the ifHighSpeed OID 1.3.6.1.2.1.31.1.1.1.15 instead of 1.3.6.1.2.1.2.2.1.5.

Full version history

Fixed bug where metrics weren't being picked up in management zones with Palo Alto entities.

Full version history

Breaking changes

Dropped support for 32-bit counter octet in/out interface metrics. Only 64-bit counters are now supported. Only devices with Firewall PAN-OS version earlier than 8.1 will be affected.

The interface_high_capacity feature set was dropped as those metrics are now in the interface feature set. Before being able to upgrade your monitoring configurations you will need to manually disable the interface-high-capacity on those configurations (if enabled).

Full version history

Breaking changes

The following metrics of the interface_high_capacity feature set are renamed

  • com.dynatrace.extension.palo-alto.generic.if.in.octets to com.dynatrace.extension.palo-alto.generic.if.hc.in.octets
  • com.dynatrace.extension.palo-alto.generic.if.out.octets to com.dynatrace.extension.palo-alto.generic.if.hc.out.octets
  • com.dynatrace.extension.palo-alto.generic.if.in.err to com.dynatrace.extension.palo-alto.generic.if.hc.in.err
  • com.dynatrace.extension.palo-alto.generic.if.out.err to com.dynatrace.extension.palo-alto.generic.if.hc.out.err
  • com.dynatrace.extension.palo-alto.generic.if.in.discards to com.dynatrace.extension.palo-alto.generic.if.hc.in.discards
  • com.dynatrace.extension.palo-alto.generic.if.out.discards to com.dynatrace.extension.palo-alto.generic.if.hc.out.discards

Any dashboards or metric events relying on these metrics will need to be reconfigured.

Customers not using the interface_high_capacity feature set are not affected.

Description

Renamed high capacity interface metrics, to fix a bug where having both the interface and interface_high_capacity feature sets enabled at the same time would cause inaccurate metrics to be ingested.

Full version history

No release notes

Full version history

No release notes

Full version history

Fix for dashboard to be compatible with feature flags

Full version history

  • bugfix: added missing chartCards
  • bugfix: added featureSet with high capacity interface metrics to fix data discrepancy

Full version history

v0.4.0

  • Added ability to use filters for Interface Name, Admin and Operational Status

Full version history

Substract of suffix ".count" in metric com.dynatrace.extension.palo-alto.generic.sys.uptime and changed it type to gauge

Full version history

  • added alerts in 0.3.1.
  • deleted sensors and memory entities and screens

Full version history

  1. New calculated metrics:

    • func:com.dynatrace.extension.palo-alto.generic.if.in.octets.bitpersec
    • func:com.dynatrace.extension.palo-alto.generic.if.out.octets.bitpersec
    • func:com.dynatrace.extension.palo-alto.generic.mem.utilization

  2. Corrected oid for dimension: if.keyx

  3. New dimension if.descr for subgroup interface

  4. Added topology, relationships and screens

Full version history

Version 0.1.15 (initial):

  • SNMP DataSource configuration
  • dashboard template
Dynatrace Hub
Get data into DynatraceBuild your own app
All (768)Log Management and AnalyticsKubernetesAI and LLM ObservabilityInfrastructure ObservabilitySoftware DeliveryApplication ObservabilityApplication SecurityDigital ExperienceBusiness Analytics
Filter
Type
Built and maintained by
Deployment model
SaaS
  • SaaS
  • Managed
Partner FinderBecome a partnerDynatrace Developer

Discover recent additions to Dynatrace

Problems logo

Problems

Analyze abnormal system behavior and performance problems detected by Davis AI.

Logs logo

Logs

Explore all your logs without writing a single query.

Security Investigator logo

Security Investigator

Fast and precise forensics for security and logs on Grail data with DQL queries.

Business Flow logo

Business Flow

Track, analyze, and optimize your critical business processes.

Cost & Carbon Optimization logo

Cost & Carbon Optimization

Track, analyze, and optimize your IT carbon footprint and public cloud costs.

Davis Anomaly Detection logo

Davis Anomaly Detection

Detect anomalies in timeseries using the Davis AI

Analyze your data

Understand your data better with deep insights and clear visualizations.

Notebooks logo

Notebooks

Create powerful, data-driven documents for custom analytics and collaboration.

Dashboards logo

Dashboards

Transform complex data into clear visualizations with custom dashboards.

Automate your processes

Turn data and answers into actions, securely, and at scale.

Workflows logo

Workflows

Automate tasks in your IT landscape, remediate problems, and visualize processes

Jira logo

Jira

Create, query, comment, transition, and resolve Jira tickets within workflows.

Slack logo

Slack

Automate Slack messaging for security incidents, attacks, remediation, and more.

Secure your cloud application

See vulnerabilities and attacks in your environment.

Security Overview logo

Security Overview

Get a comprehensive overview of the security of your applications.

Code-Level Vulnerabilities logo

Code-Level Vulnerabilities

Detect vulnerabilities in your code in real time.

Threats & Exploits logo

Threats & Exploits

Understand, triage, and investigate application security findings and alerts.

Are you looking for something different?

We have hundreds of apps, extensions, and other technologies to customize your environment

Leverage our newest innovations of Dynatrace Saas

Kick-start your app creation

Kick-start your app creation

Whether you’re a beginner or a pro, Dynatrace Developer has the tools and support you need to create incredible apps with minimal effort.
Go to Dynatrace Developer
Upgrading from Dynatrace Managed to SaaS

Upgrading from Dynatrace Managed to SaaS

Drive innovation, speed, and agility in your organization by seamlessly and securely upgrading.
Learn More
Log Management and Analytics

Log Management and Analytics

Innovate faster and more efficiently with unified log management and log analytics for actionable insights and automation.
Learn more