Sophos Firewall

Discussions SFOS 17.5.9 MR-9 View Realtime Bandwidth per User (IP)

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 8 replies
Answers 1 answer
Subscribers 28 subscribers
Views 1058 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS 17.5.9 MR-9 View Realtime Bandwidth per User (IP)

BrianBr over 5 years ago

Hi,

Where can I find an accurate real time bandwidth per connected user (IP) graph or values?

thanks.

This thread was automatically locked due to age.

0 rfcat_vk over 5 years ago

Hi,

sorry you can't.

Please check the features request forum and either add a request or vote for an exisitng request.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago

There is some improvements in V18. Just to be sure.

https://docs.sophos.com/nsg/sophos-firewall/18.0/releasenotes/en-us/nsg/sfos/releasenotes/rn_LiveConnections.html
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to LuCar Toni

Hi Lucar,

this is a screenshot using the IP report while opening this website. The screenshot shows what was but not is happening. You need to change the display refresh to the minimum of 5 secs, but that is not real time. Expanding the display you can see which application is using the data for an IP.

As you advise there are improvements in v18 and they display is way better than v17.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to rfcat_vk

I am sorry but Live Connection is just useless. Having a refresh every 5 secs does not help at all.

Also comparing iftop and live connections, the 2 do not correspond at all. I guess and I hope that iftop is right.

If Sophos does not push to improve real-time logging and better reporting, is just useless. I do not trust what XG is logging and reporting for the moment as I have proof that data do not correspond.

Try with iftop and compare the results on your own. PLEASE BRING BACK THE FLOW MONITOR AVAILABLE ON UTM9. Live connection is useless and horrible!
Cancel
Vote Up 0 Vote Down

Cancel
0 BrianBr over 5 years ago in reply to lferrara

Has anyone tried using NetFlow? (Administration/Netflow)? It seems that might be more useful and there are multiple backend software packages available to analyze the data.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to BrianBr

Hi,

Thank you for your suggestion, you get a 30 day trial and then have to pay for it and it is not cheap. You need to setup another server to store the data and the licence is more expensive than your XG. Not much value to a small business.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to BrianBr

For many small users and some installation, customers do not want to add additional costs for something that they should have out of the box.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to lferrara

It is also having someone on staff that understands setting the application up as well as a new server both hardware and software licences.

The licences cost more than the box they are trying to analyse.

Ian
Cancel
Vote Up 0 Vote Down

Cancel