How to use the ACC for PAN-OS 7.0 — Part 1

The Application Command Center (ACC) allows you to see traffic patterns to help determine if your security policy is working as it should or if any adjustments need to be made. It can be found in the PAN-OS WebGUI. 

Watch this video tutorial to learn how to use the ACC for PAN-OS version 7.0.

Transcript:

This is Joe Delio from the Palo Alto Networks Community team bringing you a video tutorial.

In today's video tutorial I will be showing you part 1 on how to use the latest version of the Application Command Center (ACC) for PAN-OS version 7.0. The ACC has been redesigned and is dramatically different from earlier versions, with many new features.

We'll start off with the new areas and what's different about the new ACC from the previous versions.
Located in the same area, on the second tab inside of the WebGUI, you will first notice the new look of the ACC.
When you compare the earlier version of the ACC (before PAN-OS 7.0) and the current version ACC (PAN-OS 7.0), the entire screen layout has been redesigned. 

At the top of the screen, you see the following:

The Export option lets you export the current view as a PDF file.
Network Activity tab
Threat Activity tab
Blocked Activity tab
+ to Add an Activity tab
Pencil option to edit the tab

On the right, you see:
Auto Refresh check box
Manual Refresh option
Help button
Risk-O-Meter

On the left pane of the ACC you see:

Time frame dropdown
Global Filters that will affect all the graphs in the ACC tab.
Note: This whole section is collapsible, if you click on the small arrow pointing left.

Under the Network Activity tab, by default, you see the following widgets:
Application Usage
User Activity
Source IP Activity
Destination IP Activity
Source Regions Destination Regions
GlobalProtect Host Information
Rule Usage
One of the most popular features of the new ACC is customization for the data you want to see.
Almost every aspect of the data can be customized using filters to new sections, including how many widgets are displayed. The GUI response has also been improved.

If you click the pencil option to edit the Network Activity tab, you see an Edit Custom Tab pop-up that shows widgets in the workspace.

Here, you have options to:
Add a Widget Group
Add a Widget (Each Widget Group that is added can have 1 or 2 widgets per group)
Reset View
If you would like to add a new section and more widgets, click Add Widget Group.

You then see a new section appear at the bottom of the pop-up window.
You have an option if you'd like to have 1 or 2 columns in each Widget Group.

If you want to add any widgets to the new group you just added, click Add Widget.

You now see all the widgets currently in use.
Check the widgets you'd like to see.
Note: You can reorganize the widgets by dragging and dropping them to other sections.

If you move or change anything accidentally, and want to reset default view, click Reset View in the upper right pop-up window.

This concludes Part 1 of this week's video tutorial - how to use the application command center (ACC) for PAN-OS 7.0 and later.

The next Video Tutorial will be Part 2 of this series, and will cover more detail of the Network Activity tab, the Threat Activity tab, and how to get more information from the new ACC.

If interested, I have covered this same information in a Tips & Tricks article. We also have a previous Video tutorial and Tips & Tricks for the previous version of PAN-OS 6.1, which will be in the video transcript below.

Video Tutorial for ACC 6.1 & Earlier:
https://live.paloaltonetworks.com/t5/Learning-Articles/Video-Tutorial-How-to-Use-the-Application-Command-Center-ACC/ta-p/67451

Tips & Tricks for ACC 6.1 & Earlier:
https://live.paloaltonetworks.com/t5/Management-Articles/Tips-amp-Tricks-How-to-Use-the-Application-Command-Center-ACC/ta-p/67342

Tips & Tricks for ACC 7.0:
https://live.paloaltonetworks.com/t5/Featured-Articles/Tips-amp-Tricks-The-Application-Command-Center-ACC-for-PAN-OS-7/ta-p/68308

As always, please feel free to post feedback or comments below.

Thanks for watching,
Joe Delio