AppFlow Monitor

The MONITOR | AppFlow > AppFlow Monitor page displays a series of reports. Select the appropriate tab for one of the reports:

• Applications
• Users
• Web Activity
• Initiator IPs
• Responder IPs
• Threats
• VoIP
• VPN
• Devices
• Contents
• Policies

The MONITOR | AppFlow > AppFlow Monitor page enables you to monitor top-level aggregate reports of what is going on in your network and, at a quick glance, answer such questions as the following:

• What are the top-most used applications running in my network?
• Which applications in terms of total number of sessions and bytes consume my network bandwidth?
• Which applications have viruses, intrusions, and spyware?
• What website categories are my users visiting?

To enable and configure the reports, follow the procedures described in Managing Flow Reporting Statistics in the SonicOS Logs documentation. The green check mark icon at the top of the MONITOR | AppFlow > AppFlow Monitor page displays a link to the DEVICE | AppFlow Settings > Flow Reporting page, where you can configure the reports.

The top of the page displays the following settings and information:

• +Create – Click to create filtering on incidents
• +Add to Filter – Click to add filter criteria to selected applications
• IP Version – Select IPv4, IPv6, or IPv4 and IPv6 to view the reports on that traffic.
• Slider – Use the slider to filter flow results as of the Last 60 secs, 2 minutes, 10 minutes, 15 minutes, 30 minutes, 60 minutes, 3 hours, 6 hours, 12 hours, 24 hours, 7 days, 15 days, 30 days, or All Flows
• Group By – Filters results by grouping flows based on Application, Category, or Signature

• Check mark – Click or mouse over to expose a popup showing the Appflow Monitor Status. Links are provided to connect you to additional data.

  

• Refresh – Click to refresh the report data.