Monitor Applications
You are here: Monitor > Maps and Charts > Applications.
Use this page to view information about bandwidth consumption, session establishment, and risks associated with your applications. Analyzing your network applications yields useful security management information, such as abnormal applications that can lead to data loss, bandwidth hogging, time-consuming applications, and personal applications that can elevate business risks.
Applications page is available on all the SRX Series Firewalls except the SRX5000 line of devices.
To view the data on the Applications page, ensure that:
On-box traffic logging and reporting is enabled. If not, go to Device Administration > Basic Settings > Security Logging, enable Stream mode Logging and On-box Reporting.
Logging is enabled for a matching traffic firewall policy. If not, go to Security Policies & Objects > Security Policies and enable Logging options under Rule Options.
Application tracking is enabled for a security zone. If not, go to Security Policies & Objects > Zones/Screens and enable Application Tracking in the Add Zone page.
You can select either the Grid View tab or the Chart View tab to view your data:
Grid View—View the comprehensive details of applications in a tabular format that includes sortable columns. You can group the applications using Top users by volume, Top apps by volume, timespan, username, and so on. The table includes information such as the application name, volume, users and so on. Table 1 describes the fields on the Grid View page.
Chart View—View a brief summary of all the applications. It shows the top 50 applications consuming maximum bandwidth in your network. The data is presented graphically as a bubble graph, heat map, or zoomable bubble graph. Table 2 describes the widgets on the Chart View page.
Field |
Description |
|---|---|
Top Users By Volume |
Top users of the application; sorted by bandwidth consumption. |
Top Apps By Volume |
Top applications, such as Amazon, Facebook, and so on of the network traffic; sorted by bandwidth consumption. |
Top Category By Volume |
Top category, such as web, infrastructure, and so on of the application; sorted by bandwidth consumption. |
Top Characteristics By Volume |
Top behavioral characteristics, such as prone to misuse, bandwidth consumer, and so on of the application. |
Sessions By Risk |
Number of events/sessions received; grouped by risk. |
Time Span |
Allows you to select a time period. Click Custom to select a preferred date. |
View App Logs |
Enables you to view the application logs. |
Search |
Enables you to search a particular content from the data. |
Application Name |
Name of the application, such as Amazon, Facebook, and so on. |
Risk Level |
Risk associated with the application: critical, high, unsafe, moderate, low, and unknown. |
Users |
Total number of users accessing the application. |
Volume |
Bandwidth used by the application. |
Total Sessions |
Total number of application sessions. |
Category |
Category of the application, such as web, infrastructure, and so on. |
Sub-Category |
Subcategory of the application. For example, social networking, news, and advertisements. Note:
There can be many sub-categories for a single category. For example, if the Category is Multimedia, it can have sub-categories as Video-streaming and Audio-streaming and so on. |
Characteristics |
Characteristics of the application. For example, prone to misuse, bandwidth consumer, capable of tunneling. Note:
There can be many characteristics displayed by a comma separator. For example, characteristics can be displayed as Support File Transfer, Loss of Productivity, Bandwidth. |
Field |
Description |
|---|---|
Top 50 Applications |
Displays the top 50 application consuming maximum bandwidth in your network. The data is presented graphically as a bubble graph, heat map, or zoomable bubble graph. |
Show By |
Allows you to reorder the bubble graph by bandwidth or by number of sessions from the drop down. If Bandwidth is selected, the size of the bubble depends on the bandwidth used. Whereas, if Number of Session is selected, the size of the bubble depends upon the number of sessions. |
Time Span |
Allows you to select a time. Click Custom to select a preferred date. |
Group By |
Allows you to group the bubble graph by bandwidth or by number of sessions from the drop down based on risk or categories. |