The hosts report shows the top hosts by data volume for the selected time period. Traffic inbound into your LAN is reported separately from the outbound traffic. You can choose to view either the internal hosts or the external hosts on the hosts report. These charts can answer questions such as:
Using this information you can determine if you need to create policies for these high data volume hosts. You may want to create protection policies for your business critical server machines or create control policies to limit hosts that are abusing the network.
Hosts are IP address endpoints in IP transactions and are usually client PCs or servers. During a flow, traffic flows from one host to another. Typically, one host is considered internal to your network and the other is external. Hosts that fall into a network object that was defined as internal are considered internal to your network; Hosts that fall into a network object that was defined as external are considered external to your network. Keep in mind that the traffic is inbound and outbound relative to your LAN – not relative to the host. Therefore, inbound traffic for an external host means that host was sending data inbound into your network.
You can drill into the host by clicking on the host name in the tables below the charts. This will show the Applications Report for the host that you drilled into. You can then use the selector on the Applications Report page to show URLs or conversations that involved the host.
The tables at the bottom of the report shows for each of the top hosts, the total amount of data, and the maximum and average throughput rates, the number of packets, and the number of flows for the selected time period. More network metrics, such as, round-trip time (RTT), network and server delays, and TCP efficiency can be shown by clicking on the Show Details link in the tables.
Where do I find this report?
Go to Monitor > Hosts.
To show only internal hosts or external hosts
Use the Select Hosts to View selector at the top of the page.
How do I interact with the pie-based reports?
You can hover over the pie slices to view the amount of data transferred as well as view the percentage of the pie. Note that the pie is showing only the top items, so the proportion is relative to the top items - not relative to all the traffic through the appliance. That is, if one wedge showed 50% of the traffic, that means it is 50% of the top items, not 50% through the appliance.
|
|
|