Fortinet FortiAnalyzer-100A, Administration Manual

Page: 107 / 162

Traffic summary and security events Traffic Summaries
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
107
Traffic summary and security events
Using the submitted log messages from registered devices, the FortiAnalyzer unit
provides data mining features that enables you to access simple reports on a
number of different intrusion attempts against your network as well as the types of
traffic occurring on your network.
This section includes the following topics
• Traffic Summaries
• Security event summaries
Traffic Summaries
Traffic summaries are pre-defined reports that provide a snapshot of the traffic
passing through the firewall on your network. The reports can help you identify
who the high volume users and FortiGate units are that may be affecting overall
network traffic. Hourly reports are updated every ten minutes, weekly, daily and
monthly reports are updated every hour.
These reports can help you in determining traffic flow issues and provide a basis
for configuring traffic shaping on a FortiGate unit to better control traffic flow
throughout the day. For details on traffic shaping, see the
FortiGate
Administration Guide .
This section includes the following topics:
• Top Users
• Device Summary
• Traffic Report
Top Users
Top users enables you to view the users that create the most traffic for each
service including web, email, FTP and IM/P2P. The tabular data presented shows
the user, which firewall they are using and the amount of data traffic created.
Viewing Web traffic
The Web Traffic page provides a summary of the HTTP and HTTPS usage per
user on the network.
To view the web traffic, go to Network Summary > Top Users > Web Traffic .
Figure 43: Viewing web traffic