Internet Reports - Firewall Reports


    The Internet Reports section includes reports that show details of traffic transferred through the firewall by the external hosts (hosts outside your LAN). In order to identify your external hosts, you need to first configure your intranet by clicking the Intranet Settings link from the Settings tab. When configured, all hosts outside your configured intranet will be considered as external hosts.

    The Top External Hosts (Sent+Received) graph shows the top external hosts that are sending and receiving traffic through the firewall. Here you can expect only IP's outside your LAN. The table below the graph shows the IP address, along with the number of hits, bytes received, bytes sent, and the total bytes (sent + received) of traffic generated.

    The Top External Protocol Groups (Sent+Received) graph shows the top protocol groups used by external host for sending and receiving traffic through the firewall. The table below the graph shows the protocol group, along with the number of hits, % hits, total bytes of traffic generated and what % of traffic each protocol group constitute to the total traffic.

    If you drill down any of the conversation, the conversation data is displayed in a pop up table with the following tabs:

    • Top Protocol
    • Top Hosts
    • Top Destinations
    • Top Conversations.

    Under each tab of analysis of traffic sent using a specific protocol, the following details are displayed.

    • Top Protocol

    Protocol, Hits, Bytes Rcvd (MB), Bytes Sent (MB), Total Bytes (MB), and % Total Bytes.

    • Top Hosts

    Host, Hits, Bytes Rcvd (MB), Bytes Sent (MB), Total Bytes (MB), and % Total Bytes.

    • Top Destinations

    Destination, Hits, Total Bytes (MB) and % Total Bytes.

    • Top Conversations

    Host, Destination, Protocol, Hits, Bytes Rcvd (MB), Bytes Sent (MB), Total Bytes (MB), and % Total Bytes.

    The Top External Sites graph shows the top external sites that were visited. This is destination based report which list the external servers or sites which served more for the internal hosts. Transaction is not started/initiated by the servers listed here. You can expect all external sites which are browsed more by your internal hosts. The table below the graph shows the host name or IP address, along with the number of hits, the total bytes of traffic to the site, and % of total traffic to the particular external site.

    If you drill down any of the conversation, the conversation data is displayed in a pop up table with the following tabs:

    • Top Hosts
    • Top Protocol Groups
    • Top Conversations
    • Top URLs
    • Top URLs Blocked

    Under each tab of analysis of traffic sent using a specific protocol, the following details are displayed.

    • Top Hosts

    Host, Hits, % Hits, Total Bytes (MB), and % Total Bytes.

    • Top Protocol Groups

    Protocol Group, Hits, and Total Bytes (MB).

    • Top Conversations

    Host, Destination, Protocol, Hits, Bytes Rcvd (MB), Bytes Sent (MB), Total Bytes (MB).

    • Top URLs

    URL, Hits, and Total Bytes (MB).

    • Top URLs Blocked

    URL and Hits.

    The Top Conversations table lists details like host which initiated the conversation, its destination, the protocol used for the conversation along with the number of hits, the total bytes of traffic generated and % of total traffic for the particular conversation.