SonicOS 7.1 Monitor Appflow

Applications

Using the View drop-down list, select what you want included in the Applications report. The view type defines reporting based on the total activity Since Restart of firewall, activity Since Last Reset by user, or activity based on the configured schedule. If you select On Schedule, you can configure to export report either via FTP or email.

When viewing the Applications data, the key information is provided in the table:

  • Sessions — Number of connections or flows
  • Initiator Bytes — Number of bytes sent by the initiator
  • Responder Bytes — Number of bytes sent by the responder

Additionally, the report provides the following information:

  • Application Name — Name of the application - Signature ID
  • Percentage of Applications — The frequency of this application as a percentage of the total number of applications
  • Access Rules — Number of connections/flows blocked by the firewall rules
  • App Rules — Number of connections/flows blocked by DPI engine
  • Location Block — Number of connections/flows blocked by GEO enforcement
  • Botnet Block — Number of connections/flows blocked by BOTNET enforcement
  • Virus — Number of connections/flows with virus
  • Intrusion — Number of connections/flows identified as intrusions
  • Spyware — Number of connections/flows with spyware

The columns in the table can be customized so it displays only what you want to see. Click the gear icon to select columns.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden