Cisco Cisco Firepower Management Center 4000

Page of 1844
 
16-20
FireSIGHT System User Guide
 
Chapter 16      Working with Connection & Security Intelligence Data 
  Working with Connection Graphs
To select the datasets displayed on a connection graph:
Access: 
Admin/Any Security Analyst
Step 1
Click 
Datasets
 and select the datasets you want to graph.
The datasets you can select are described in the 
 table.
Viewing Information About Aggregated Connection Data
License: 
Any
Table 16-5
Dataset Options 
If the y-axis displays...
You can select as datasets...
Connections
the default only, which is the number of connections detected on the 
monitored network (
Connections
)
This is the only option for traffic profile graphs.
KBytes
combinations of:
  •
the total kilobytes transmitted on the monitored network (
Total 
KBytes
)
  •
the number of kilobytes transmitted from host IP addresses on 
the monitored network (
Initiator KBytes
)
  •
the number of kilobytes received by host IP addresses on the 
monitored network (
Responder KBytes
)
KBytes Per Second
the default only, which is the total kilobytes per second transmitted 
on the monitored network (
Total KBytes Per Second
)
Packets
combinations of:
  •
the total packets transmitted on the monitored network (
Total 
Packets
)
  •
the number of packets transmitted from host IP addresses on the 
monitored network (
Initiator Packets
)
  •
the number of packets received by host IP addresses on the 
monitored network (
Responder Packets
)
Unique Hosts
combinations of:
  •
the number of unique session initiators on the monitored 
network (
Unique Initiators
)
  •
the number of unique session responders on the monitored 
network (
Unique Responders
)
Unique Application Protocols
the default only, which is the number of unique application protocols 
on the monitored network (
Unique Application Protocols
)
Unique Users
the default only, which is the number of unique users logged into 
session initiators on the monitored network (
Unique Initiator Users
)