Palo Alto Panorama extension

• Latest Dynatrace
• Extension
• Updated on May 04, 2026

Monitor health and performance metrics of Palo Alto firewalls using Panorama.

Get started

Overview

Monitor your Palo Alto firewalls and their interfaces using Palo Alto's centralized management platform, Panorama. See the Unified Analysis pages and Infrastructure & Operations to find out how to analyze the health of your firewalls and drill down into individual metrics.

Use cases

Compatibility information

Activation and setup

The Palo Alto Panorama extension requires a read-only Panorama user with XML API access enabled.

Details

The extension works remotely by accessing metrics over the Panorama XML API. It uses the same metric keys as the SNMP-based Palo Alto firewalls extension for compatibility.

Licensing and cost

There is no charge for obtaining the extension, only for the data (metrics) that the extension ingests. The details of license consumption depend on which licensing model you are using: either Dynatrace classic licensing or the Dynatrace Platform Subscription (DPS) model.

Metrics

License consumption is based on the number of metric data points ingested. The following formula estimates annual data points ingested, assuming all feature sets are enabled.

(
  (
    (51 * Number of Firewalls)
  + (25 * Number of Interfaces)
  + (3 * Number of Virtual Systems)
  ) / <Metrics Collection Interval>
) * 60 minutes * 24 hours * 365 days data points per year

Classic licensing

In the Dynatrace classic licensing model, metric ingestion consumes Davis Data Units (DDUs) at the rate of .001 DDUs per metric data point. Multiply the above formula for annual data points by .001 to estimate annual DDU usage.

FAQ

Feature sets

When activating your extension using monitoring configuration, you can limit monitoring to one of the feature sets. To work properly, the extension has to collect at least one metric after the activation.

In highly segmented networks, feature sets can reflect the segments of your environment. Then, when you create a monitoring configuration, you can select a feature set and a corresponding ActiveGate group that can connect to this particular segment.

All metrics that aren't categorized into any feature set are considered to be the default and are always reported.

Explore in Dynatrace Hub

Monitor health and performance metrics of Palo Alto firewalls using Panorama.