Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions SFOS 17.5.9 MR-9 View Realtime Bandwidth per User (IP)

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 8 replies
Answers 1 answer
Subscribers 40 subscribers
Views 1250 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 17.5.9 MR-9 View Realtime Bandwidth per User (IP)

BrianBr over 4 years ago

Hi,

Where can I find an accurate real time bandwidth per connected user (IP) graph or values?

thanks.

This thread was automatically locked due to age.

Parents

0 LuCar Toni over 4 years ago

There is some improvements in V18. Just to be sure.

https://docs.sophos.com/nsg/sophos-firewall/18.0/releasenotes/en-us/nsg/sfos/releasenotes/rn_LiveConnections.html

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to LuCar Toni

Hi Lucar,

this is a screenshot using the IP report while opening this website. The screenshot shows what was but not is happening. You need to change the display refresh to the minimum of 5 secs, but that is not real time. Expanding the display you can see which application is using the data for an IP.

As you advise there are improvements in v18 and they display is way better than v17.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to rfcat_vk

I am sorry but Live Connection is just useless. Having a refresh every 5 secs does not help at all.

Also comparing iftop and live connections, the 2 do not correspond at all. I guess and I hope that iftop is right.

If Sophos does not push to improve real-time logging and better reporting, is just useless. I do not trust what XG is logging and reporting for the moment as I have proof that data do not correspond.

Try with iftop and compare the results on your own. PLEASE BRING BACK THE FLOW MONITOR AVAILABLE ON UTM9. Live connection is useless and horrible!
Cancel
Vote Up 0 Vote Down

Cancel
0 BrianBr over 4 years ago in reply to lferrara

Has anyone tried using NetFlow? (Administration/Netflow)? It seems that might be more useful and there are multiple backend software packages available to analyze the data.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrianBr over 4 years ago in reply to lferrara

Has anyone tried using NetFlow? (Administration/Netflow)? It seems that might be more useful and there are multiple backend software packages available to analyze the data.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 4 years ago in reply to BrianBr

Hi,

Thank you for your suggestion, you get a 30 day trial and then have to pay for it and it is not cheap. You need to setup another server to store the data and the licence is more expensive than your XG. Not much value to a small business.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to BrianBr

For many small users and some installation, customers do not want to add additional costs for something that they should have out of the box.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to lferrara

It is also having someone on staff that understands setting the application up as well as a new server both hardware and software licences.

The licences cost more than the box they are trying to analyse.

Ian

XG115W - v20.0.3 MR-3 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel