Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Monitor Traffic Map

You are here: Monitor > Maps and Charts > Traffic Map.

Note:

Traffic Map page is available on all the SRX Series Firewalls except the SRX5000 line of devices.

J-Web supports monitoring traffic through a map. Use this page to visualize inbound and outbound traffic between geographic regions. You can click or hover over the bubble to view more details on the inbound or outbound traffic. The size of the bubble indicates the session count or the bandwidth utilization for a traffic. Traffic with unknown geographical IP addresses and private IP addresses are displayed as question mark icon and lock icon, respectively.

Note:

To view the data on the Traffic Map page, ensure that security logging is enabled. If not, go to Device Administration > Basic Settings > Security Logging and enable Stream mode Logging and On-box reporting.

Application Risk Category

The color code of the bubble indicates the risk associated with the application. Table 1 shows the application risk categories and the risk values.

Table 1: Application Risk Category and Risk Value

Application Risk Category

Risk Value

Critical

>=5

High

>=4 and <5

Unsafe

>=3 and <4

Moderate

>=2 and <3

Low

>=0 and <2

You can calculate the average risk value using the following formula:

Field Descriptions

Table 2 displays the fields of the Traffic Map page.

Table 2: Fields on the Traffic Map Page

Field

Description

By Volume

Displays the bandwidth utilization. This is the default value.

By Session

Displays the total number of traffic sessions.

Inbound Traffic

Displays the traffic coming through the device from the source countries.

Outbound Traffic

Displays the traffic goes through the device to the destination countries. This is the default value.

Top Sources

Displays the top 10, 20 (default value), or 50 source countries with the following details:

  • Country—Displays the country name.

  • Risk level—Displays the risk level category. For example, low, critical, unsafe.

  • Avg. risk—Displays the average risk count.

  • Sessions or Bandwidth—Displays the session count or bandwidth utilization.

Top Destinations

Displays the top 10, 20 (default value), or 50 destination countries with the following details:

  • Country—Displays the country name.

  • Risk level—Displays the risk level category. For example, low, critical, unsafe.

  • Avg. risk—Displays the average risk count.

  • Sessions or Bandwidth—Displays the session count or bandwidth utilization.

View Data

Displays the traffic data for the defined time interval. By default, traffic data for the last five minutes is displayed. You can select the predefined time interval or click Customize to customize the time interval by entering date and time.

Note:

Starting in Junos OS Release 21.4R1, the default duration is changed from Last 1 hour to Last 5 minutes to speed up the J-Web UI loading process.

Search

Enter the country name for which you want to view the data and click the search icon. You can view the country flags before the country names. Click on the country name to view its data.

Tasks You Can Perform

You can perform the following tasks from this page:

  • Zoom in and out of the page—Click the zoom in (+) and zoom out (–) icons to zoom in and out of the page.

  • Refresh the data on the page—Click the refresh icon available below the zoom out icon.

  • Pan the page—Click and drag the mouse to pan the page.

  • View country-specific details—Hover over the bubble to view the country specific details.

Related Documentation