User Visibility Overview

You can use the User Visibility page to view information related to the bandwidth consumption, session establishment, and the risks associated with the users.

Starting in Junos Space Security Director Release 16.1, users are displayed on the page by username and, if the user name is not available, by source IP address.

There are two ways to view your data. You can select either the Chart View or Grid View.

Chart View

By default, the user’s data is shown in the Chart view. It shows the top 50 users consuming maximum bandwidth in your network. The data can be presented graphically as a bubble graph, heat map, or zoomable bubble graph. The data is refreshed automatically based on the selected time range.

You can hover over a username or source IP to view critical information such as total number of sessions and bandwidth consumed. The sessions are shown as links. When you click a link, the All Events page appears with all security events.

Starting in Junos Space Security Director Release 16.1, you can view all the applications accessed by the user by clicking the View All Applications link. When you click the View All Applications link, the Application Visibility page in Grid view is displayed with the correct filter applied.

You can block a user or an application.

Table 47 shows the different filters you can use to view the user’s data in Chart view.

Table 47: Chart View Filters

 

Filter Name

Description

All Devices

Shows data for all the devices managed by Security Director. Click Edit to select root devices and/or LSYS devices to view the result.

Show By

Select from the following options to view the user’s data:

  • Bandwidth - Shows data based on the amount of bandwidth the user has consumed for a particular time range.

  • Number of Sessions - Shows data based on the number of sessions consumed by the user.

Time Span

Select the required time range to view the user’s data.

Use the custom option to choose the time range if you want to view data for more than one day. The date range is from 00:00 hours to 23:59 hours.

Select Graph

Select from the following graphical representation to view a user’s data:

  • Bubble Graph

  • Heat Map

  • Zoomable Bubble Graph

By default, data is shown in the Bubble Graph format.

Number of Sessions

Shows total number of user sessions.

Bandwidth

Shows bandwidth usage of the user.

Block User

Blocks the user from using the application.

Block Application(s)

Blocks the usage of the application.

View All Applications

Shows all the applications accessed by the user.

Grid View

Click Grid View to view the user’s data in the tabular format. Table 48 and Table 49 describe the fields on this page. You can view top users by volume and top applications by volume. Grid view provides a detailed view of all the users. By default, data is sorted based on the bandwidth usage.

Table 48: Grid View Widgets

 

Widget Name

Description

Top Users By Volume

List the top five users sorted by their bandwidth consumption.

Top Apps By Volume

List the top five applications being accessed in your network for the specified time range.

The sessions and applications are shown as links. When the user clicks a session link, the All Events page appears with all security events. When the user clicks an application link, the Application Visibility page in Grid view appears with the correct filter applied.

Table 49: Detailed View of the User

 

Field Name

Description

User Name

Shows the name of a user.

Volume

Shows the bandwidth consumption of a user.

Total Sessions

Shows the number of user sessions.

Applications

Shows all the applications used by a user for the time range.