User Visibility Overview
You can use the User Visibility page to view information related to the bandwidth consumption, session establishment, and the risks associated with the users.
Starting in Junos Space Security Director Release 16.1, users are displayed on the page by username and, if the user name is not available, by source IP address.
There are two ways to view your data. You can select either the Chart View or Grid View.
Chart View
By default, the user’s data is shown in the Chart view. It shows the top 50 users consuming maximum bandwidth in your network. The data can be presented graphically as a bubble graph, heat map, or zoomable bubble graph. The data is refreshed automatically based on the selected time range.
You can hover over a username or source IP to view critical information such as total number of sessions and bandwidth consumed. The sessions are shown as links. When you click a link, the All Events page appears with all security events.
Starting in Junos Space Security Director Release 16.1, you can view all the applications accessed by the user by clicking the View All Applications link. When you click the View All Applications link, the Application Visibility page in Grid view is displayed with the correct filter applied.
You can block a user or an application.
Table 1 shows the different filters you can use to view the user’s data in Chart view.
Table 1: Chart View Filters
Filter Name | Description |
|---|---|
All Devices | Shows data for all the devices managed by Security Director. Click Edit to select root devices, Logical Systems (LSYS) devices, or Tenant Systems (TSYS) devices to view the result. |
Show By | Select from the following options to view the user’s data:
|
Time Span | Select the required time range to view the user’s data. Use the custom option to choose the time range if you want to view data for more than one day. The date range is from 00:00 hours to 23:59 hours. |
Select Graph | Select from the following graphical representation to view a user’s data:
By default, data is shown in the Bubble Graph format. |
Number of Sessions | Shows total number of user sessions. |
Bandwidth | Shows bandwidth usage of the user. |
Block User | Blocks the user from using the application. |
Block Application(s) | Blocks the usage of the application. |
View All Applications | Shows all the applications accessed by the user. |
Grid View
Click Grid View to view the user’s data in the tabular format. Table 2 and Table 3 describe the fields on this page. You can view top users by volume and top applications by volume. Grid view provides a detailed view of all the users. By default, data is sorted based on the bandwidth usage.
Table 2: Grid View Widgets
Widget Name | Description |
|---|---|
Top Users By Volume | List the top five users sorted by their bandwidth consumption. |
Top Apps By Volume | List the top five applications being accessed in your network for the specified time range. |
The sessions and applications are shown as links. When the user clicks a session link, the All Events page appears with all security events. When the user clicks an application link, the Application Visibility page in Grid view appears with the correct filter applied.
Table 3: Detailed View of the User
Field Name | Description |
|---|---|
User Name | Shows the name of a user. |
Volume | Shows the bandwidth consumption of a user. |
Total Sessions | Shows the number of user sessions. |
Applications | Shows all the applications used by a user for the time range. |