Cisco Cisco Firepower Management Center 4000

Page of 1844
 
40-17
FireSIGHT System User Guide
 
Chapter 40      Creating Traffic Profiles
  Viewing Traffic Profiles
You can perform almost all the same actions on traffic profile graphs that you can perform on connection 
data graphs. However, because traffic profiles are based on aggregated data (connection summaries), you 
cannot examine the individual connection events on which the graphs are based. In other words, you 
cannot drill down to a connection data table view from a traffic profile graph. See 
 for more information. In addition, traffic profiles appear as 
detached graphs. For more information, se
In addition, traffic profile graphs plotted over time show the mean (average) y-axis value as a bold 
horizontal line. Graphs over time also plot the values of the first four standard deviations above and 
below the mean, assuming that network traffic is distributed normally. By default, these statistics are 
calculated over the PTW, but if you alter the time settings for a graph, the Defense Center recalculates 
the statistics. Rules written against traffic profile statistics, however, are always evaluated against the 
statistics for the PTW.
To view a traffic profile graph for a traffic profile:
Access: 
Admin/Discovery Admin
Step 1
Select 
Policies > Correlation
, then click 
Traffic Profiles
.
The Traffic Profiles page appears.
Step 2
Next to the traffic profile for which you want to view the graph, click the graph icon (
).
The graph for the traffic profile appears in a separate browser window.