This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

net traffic

Hi,

Could someone put me in right direction?

in the network usage log what is the top client and what is the top server? does the top client means the incoming traffice and the top server means uit goinig traffice?

this really confuing and we cannot find any documantion on this?

is the total traffice that we see in the daily report is outgoing and incoming data? how can we know how much of this data is outgoing or incoming?

Any hint would be appreciated.



This thread was automatically locked due to age.
Parents
  • Hi Aresh,

    Greetings.

    Top Client will give you report for the total traffic consumed by internal clients through UTM. Alongside, Top Server will give you report for the incoming server traffic.

    Please note that the labels IN and OUT for traffic may vary depending on the point of view. When running in proxy mode, the client connects to port 8080 on UTM, so data sent by the client (the request) is seen as incoming traffic and the data sent to the client (the response) is seen as outgoing traffic on the internal interface.

    The total traffic the daily report reflects is the total consumption of data IN and OUT.

    As of now, there is no provision to check the data consumption individually i.e., IN and OUT separately.

    Hope that helps:)

    Thanks

    Sachin Gurung

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply
  • Hi Aresh,

    Greetings.

    Top Client will give you report for the total traffic consumed by internal clients through UTM. Alongside, Top Server will give you report for the incoming server traffic.

    Please note that the labels IN and OUT for traffic may vary depending on the point of view. When running in proxy mode, the client connects to port 8080 on UTM, so data sent by the client (the request) is seen as incoming traffic and the data sent to the client (the response) is seen as outgoing traffic on the internal interface.

    The total traffic the daily report reflects is the total consumption of data IN and OUT.

    As of now, there is no provision to check the data consumption individually i.e., IN and OUT separately.

    Hope that helps:)

    Thanks

    Sachin Gurung

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Children
  • Hi Sachin,

    Thank you for explaining the net usage,

    I really like to know how network usage works. We are an hosting company, security and data usage is very important to us. As security point of view we are very happy with the utm.

    You said "Top Client will give you report for the total traffic consumed by internal clients through UTM"

    But when we check the top clients I can see the external IP of one of our customers that access our FTP server to upload daily data to our FTP server!! I also see more external IP's that thier destnation is to the servers at our LAN.

    Also I dont undrestand the network usage of the NICs in daily Reports,

    The report shows the Total trafiic is 45.8GB, but when I check the graphs of all the NICs I dont understand how Sophos comeup with this number, this is my graph of a daily report:

    Total eth0 (LAN):57.95

    Total eth1 (WAN): 23.99

    Total eth 3: 2.53

    is there some good documantion on this subject?