Pan(w)achrome for Palo Alto Networks firewalls from the indeni perspective

Notice: This blog post was originally published on Indeni before its acquisition by BlueCat.

The content reflects the expertise and perspectives of the Indeni team at the time of writing. While some references may be outdated, the insights remain valuable. For the latest updates and solutions, explore the rest of our blog

Key Takeaways
  • Pan(w)achrome is a Chrome extension that connects to Palo Alto Networks firewalls to display key operational metrics such as CPU, memory, traffic, and various counters.
  • The extension improves accessibility to firewall statistics by integrating directly into the browser rather than requiring a dedicated management application.
  • Comparable visibility tools exist for other vendors (e.g., Check Point SmartView Monitor, Juniper Junos Space, Fortinet FortiManager and web UI), indicating a common need for basic real-time monitoring.
  • The post advocates for Palo Alto Networks R&D to formally own and further develop Pan(w)achrome to provide deeper visibility into firewall internals.
  • GUI-based monitoring tools like Pan(w)achrome are limited in their ability to analyze complex configurations and logs and are not suited to serve as comprehensive alerting systems.
  • For advanced configuration and log analysis plus broader operational data collection on Palo Alto Networks firewalls, a separate specialized tool such as indeni is required.

Pan(w)achrome is a chrome extension written by Luigi Mori, a solutions architect at Palo Alto Networks. The extension lets you connect to your Palo Alto firewalls and keep track of certain vital stats – mostly CPU, memory, traffic and a variety of counters.

This is a good step in the right direction – every product we support today has some sort of tool for visualizing some basic stats. Check Point has SmartView Monitor. Juniper has Junos Space. Fortinet has the capabilities in the Fortigate’s web UI as well as within FortiManager. The nice touch with Pan(w)achrome is that it’s built into the browser (through the extension) so it’s a bit easier to access.

As PAN-OS progresses (see the recent release – 7.0), we, at indeni, hope that an investment into Pan(w)achrome will be made. Firstly by taking ownership of the extension at the R&D level (and not a side project), as well as providing much deeper visibility into important elements of the Palo Alto Networks firewalls.

At indeni, we see tools like this as a great means of providing customers with some visibility. The challenge, though, is that these tools are not capable of analyzing configurations and logs (as these are too complicated and are not graphable) and cannot be used as alerting systems. It’s simply far outside their scope.

So, if you’re looking for in-depth configuration and log analysis, as well as comprehensive operational data collection, give indeni for Palo Alto Networks firewalls a spin. Takes just 45 minutes to set up.


Published in:

Related content

Agentic AI adoption in network observability propels NetOps teams

Network observability is crucial for today’s networks and even more capable with agentic AI, according to new Omdia and BlueCat research.

Read more

Stop the ticket bottleneck: Automate DNS, DHCP, and IPAM with Quick Service

Automated DNS, DHCP, and IPAM (DDI) service delivery enables organizations to replace manual, ticket-based workflows with policy-driven, self-service…

Read more

Stay ahead of network issues with real-time metrics with BlueCat Integrity X

Get real-time DNS, DHCP, and IPAM metrics with BlueCat Integrity X. Detect issues early using native Prometheus telemetry and proactive DDI observability.

Read more

Adding business context to DDI with tagging in BlueCat Integrity X

Add business context to DNS, DHCP, and IPAM with tagging in BlueCat Integrity X. Improve visibility, automation, and governance across complex networks.

Read more

⏳ Cisco Live is almost here. Put BlueCat on your agenda for smarter, more secure networks.