Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Monitor Applications

You are here: Monitor > Maps and Charts > Applications.

Use this page to view information about bandwidth consumption, session establishment, and risks associated with your applications. Analyzing your network applications yields useful security management information, such as abnormal applications that can lead to data loss, bandwidth hogging, time-consuming applications, and personal applications that can elevate business risks.

Note:

Applications page is available on all the SRX Series Firewalls except the SRX5000 line of devices.

Note:

To view the data on the Applications page, ensure that:

  • On-box traffic logging and reporting is enabled. If not, go to Device Administration > Basic Settings > Security Logging, enable Stream mode Logging and On-box Reporting.

  • Logging is enabled for a matching traffic firewall policy. If not, go to Security Policies & Objects > Security Policies and enable Logging options under Rule Options.

  • Application tracking is enabled for a security zone. If not, go to Security Policies & Objects > Zones/Screens and enable Application Tracking in the Add Zone page.

You can select either the Grid View tab or the Chart View tab to view your data:

  • Grid View—View the comprehensive details of applications in a tabular format that includes sortable columns. You can group the applications using Top users by volume, Top apps by volume, timespan, username, and so on. The table includes information such as the application name, volume, users and so on. Table 1 describes the fields on the Grid View page.

  • Chart View—View a brief summary of all the applications. It shows the top 50 applications consuming maximum bandwidth in your network. The data is presented graphically as a bubble graph, heat map, or zoomable bubble graph. Table 2 describes the widgets on the Chart View page.

Table 1: Applications—Fields on the Grid View Page

Field

Description

Top Users By Volume

Top users of the application; sorted by bandwidth consumption.

Top Apps By Volume

Top applications, such as Amazon, Facebook, and so on of the network traffic; sorted by bandwidth consumption.

Top Category By Volume

Top category, such as web, infrastructure, and so on of the application; sorted by bandwidth consumption.

Top Characteristics By Volume

Top behavioral characteristics, such as prone to misuse, bandwidth consumer, and so on of the application.

Sessions By Risk

Number of events/sessions received; grouped by risk.

Time Span

Allows you to select a time period. Click Custom to select a preferred date.

View App Logs

Enables you to view the application logs.

Search

Enables you to search a particular content from the data.

Application Name

Name of the application, such as Amazon, Facebook, and so on.

Risk Level

Risk associated with the application: critical, high, unsafe, moderate, low, and unknown.

Users

Total number of users accessing the application.

Volume

Bandwidth used by the application.

Total Sessions

Total number of application sessions.

Category

Category of the application, such as web, infrastructure, and so on.

Sub-Category

Subcategory of the application. For example, social networking, news, and advertisements.

Note:

There can be many sub-categories for a single category. For example, if the Category is Multimedia, it can have sub-categories as Video-streaming and Audio-streaming and so on.

Characteristics

Characteristics of the application. For example, prone to misuse, bandwidth consumer, capable of tunneling.

Note:

There can be many characteristics displayed by a comma separator. For example, characteristics can be displayed as Support File Transfer, Loss of Productivity, Bandwidth.

Table 2: Applications—Widgets on the Chart View Page

Field

Description

Top 50 Applications

Displays the top 50 application consuming maximum bandwidth in your network.

The data is presented graphically as a bubble graph, heat map, or zoomable bubble graph.

Show By

Allows you to reorder the bubble graph by bandwidth or by number of sessions from the drop down.

If Bandwidth is selected, the size of the bubble depends on the bandwidth used. Whereas, if Number of Session is selected, the size of the bubble depends upon the number of sessions.

Time Span

Allows you to select a time. Click Custom to select a preferred date.

Group By

Allows you to group the bubble graph by bandwidth or by number of sessions from the drop down based on risk or categories.