Network Conversations
This section covers the dashboards populated by NFO Module Network Conversations.
Network Conversations by Traffic
This dashboard monitors host pairs which generate most traffic in your network. It is useful for real time or historical network utilization and bandwidth monitoring. The dashboard shows bytes, packets, the number of connections, and the average duration of the network conversation between two hosts.
Use the filtering options and time picker at the top of the dashboard to select the time interval and narrow down your search results.
Network Conversations by Protocol and Port
This dashboard monitors host pairs traffic in your network by Service Name and Transport Protocol Port Number (a.k.a Destination port). The App is packaged with services.csv lookup file, which is used to display the service name and protocol, according to IANA:
(http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml)
Use the filtering options and time picker at the top of the dashboard to select the time interval and narrow down your search results.
Network Conversations Cyber Threats
This dashboard shows your Network Conversations with malicious hosts, including their geographical locations. The threat lists are configured in NetFlow Optimizer.
Network Conversations Top Applications
This dashboard monitors host pairs traffic by application, taking advantage of app names reported in NetFlow/IPFIX by some vendors (Cisco, Palo Alto Networks, Fortinet, Cubro, etc).
Network Conversations Top Users
This dashboard monitors host pairs traffic by users. User identity, including identity provider (IDP) is added to NFO output when NetFlow/IPFIX/sFlow is ingested and processed in real-time.
Network Conversations Top Applications and Users
This dashboard enables you to monitor host pair traffic by application with drill down to user level.
Network Conversations Accepts-Rejects
This dashboard shows Accepted / Rejected Network Conversation statistics.
Top Devices by Concurrent connections
This dashboard monitors host pairs and reports concurrent connections by network device.
