Network Activity ThreatMonitor
Network Activity Reporting
The Network Activity folder of the ThreatMonitor displays information about inbound and outbound traffic and firewall statistics on the unit. When first loaded the last 24 hours of activity are shown. The top bar allows you to enter a time and date range for the activity reports.
By default each report will refresh every five minutes and the refresh button is available to force an immediate update. Use the Add Report button to add a report to the Network Activity folder. The Search button can be used to search any area of the ThreatMonitor for a particular term.
Network Reports
The following reports are available by default on the Network Activity folder. Placing your cursor over the data will reveal the specific data that the report represents.
WAN Activity Received - The amount of data received on the WAN interface.
WAN Activity Sent - The amount of data transmitted by the WAN interface.
Top Blocked Destination Addresses - The destination IP addresses blocked by the firewall, sorted by number of requests.
Top Blocked Source Addresses - The source IP addresses that are most commonly blocked by the firewall, both internal and external.
Protocol Usage - A representation of the most used protocols on your network showing distribution of each protocol over the total activity recorded in the selected date range. Placing your cursor over a particular protocol will show how much data for that protocol has passed.
Additional Information
Example network reports in the Network Report Examples article.
For more general information on the ThreatMonitor including help on basic functionality and reporting visit the reporting section of our knowledge base.
