SonicWALL 5.8.1 Manuale Utente
Log > Flow Reporting
1372
SonicOS 5.8.1 Administrator Guide
•
Top Apps—Displays the Applications graph.
•
Bits per second—Displays the Bandwidth graph.
•
Packets per second—Displays the Packet Rate graph.
•
Average packet size—Displays the Packet Size graph.
•
Connections per second—Displays the Connection Rate graph.
•
Core utility—Displays the Core Utilization graph.
External Collector Settings
The External Collector Settings section has configurable options for AppFlow reporting to an
IPFIX or other external collector.
IPFIX or other external collector.
•
Send AppFlow and Real-Time Data to EXTERNAL Collector—This is a global checkbox
that enables or disables flow reporting to an external collector, such as IPFIX. Selecting this
checkbox enables flow reporting to IPFIX or other external collectors. When this is enabled
or disabled, you may need to reboot the appliance.
that enables or disables flow reporting to an external collector, such as IPFIX. Selecting this
checkbox enables flow reporting to IPFIX or other external collectors. When this is enabled
or disabled, you may need to reboot the appliance.
•
External Flow Reporting Format—This drop-down list allows you to select the format of
the flows to be reported to an external flow collector. If the reporting type is set to Netflow
versions 5, 9, or IPFIX, then any third-party collector can be used to show flows reported
from the device using standard data types as defined in IETF. If the reporting type is set to
IPFIX with extensions, then only collectors that are SonicWALL flow aware should be used.
the flows to be reported to an external flow collector. If the reporting type is set to Netflow
versions 5, 9, or IPFIX, then any third-party collector can be used to show flows reported
from the device using standard data types as defined in IETF. If the reporting type is set to
IPFIX with extensions, then only collectors that are SonicWALL flow aware should be used.
AppFlows can be reported in the following formats:
–
Netflow version-5
–
Netflow version-9
–
IPFIX (with standard fields)
–
IPFIX with extensions—These SonicWALL extensions include dynamic tables for
connections, users, applications, threats (viruses/spyware/intrusions), URLs, logs,
real-time health (memory/CPU/interface statistics), VPN tunnels, devices, SPAM,
wireless devices and locations. Flows reported in this mode can be viewed by another
SonicWALL firewall configured as a collector, such as the idle firewall in an HA pair, or
a SonicWALL Linux collector running the SonicWALL provided package. Some third
party collectors, such as Plixer Scrutinizer, can also use this mode to display
applications if using standard IPFIX support. Not all reports are visible when using third
party collectors.
connections, users, applications, threats (viruses/spyware/intrusions), URLs, logs,
real-time health (memory/CPU/interface statistics), VPN tunnels, devices, SPAM,
wireless devices and locations. Flows reported in this mode can be viewed by another
SonicWALL firewall configured as a collector, such as the idle firewall in an HA pair, or
a SonicWALL Linux collector running the SonicWALL provided package. Some third
party collectors, such as Plixer Scrutinizer, can also use this mode to display
applications if using standard IPFIX support. Not all reports are visible when using third
party collectors.