Cisco Cisco Firepower Management Center 2000
16-20
FireSIGHT System User Guide
Chapter 16 Working with Connection & Security Intelligence Data
Working with Connection Graphs
To select the datasets displayed on a connection graph:
Access:
Admin/Any Security Analyst
Step 1
Click
Datasets
and select the datasets you want to graph.
The datasets you can select are described in the
table.
Viewing Information About Aggregated Connection Data
License:
Any
Table 16-5
Dataset Options
If the y-axis displays...
You can select as datasets...
Connections
the default only, which is the number of connections detected on the
monitored network (
monitored network (
Connections
)
This is the only option for traffic profile graphs.
KBytes
combinations of:
•
the total kilobytes transmitted on the monitored network (
Total
KBytes
)
•
the number of kilobytes transmitted from host IP addresses on
the monitored network (
the monitored network (
Initiator KBytes
)
•
the number of kilobytes received by host IP addresses on the
monitored network (
monitored network (
Responder KBytes
)
KBytes Per Second
the default only, which is the total kilobytes per second transmitted
on the monitored network (
on the monitored network (
Total KBytes Per Second
)
Packets
combinations of:
•
the total packets transmitted on the monitored network (
Total
Packets
)
•
the number of packets transmitted from host IP addresses on the
monitored network (
monitored network (
Initiator Packets
)
•
the number of packets received by host IP addresses on the
monitored network (
monitored network (
Responder Packets
)
Unique Hosts
combinations of:
•
the number of unique session initiators on the monitored
network (
network (
Unique Initiators
)
•
the number of unique session responders on the monitored
network (
network (
Unique Responders
)
Unique Application Protocols
the default only, which is the number of unique application protocols
on the monitored network (
on the monitored network (
Unique Application Protocols
)
Unique Users
the default only, which is the number of unique users logged into
session initiators on the monitored network (
session initiators on the monitored network (
Unique Initiator Users
)