SFOS 17.5.9 MR-9 View Realtime Bandwidth per User (IP)

There is some improvements in V18. Just to be sure. 

https://docs.sophos.com/nsg/sophos-firewall/18.0/releasenotes/en-us/nsg/sfos/releasenotes/rn_LiveConnections.html

Hi Lucar,

this is a screenshot using the IP report while opening this website. The screenshot shows what was but not is happening. You need to change the display refresh to the minimum of 5 secs, but that is not real time. Expanding the display you can see which application is using the data for an IP.

As you advise there are improvements in v18 and they display is way better than v17.

Ian

I am sorry but Live Connection is just useless. Having a refresh every 5 secs does not help at all.

Also comparing iftop and live connections, the 2 do not correspond at all. I guess and I hope that iftop is right.

If Sophos does not push to improve real-time logging and better reporting, is just useless. I do not trust what XG is logging and reporting for the moment as I have proof that data do not correspond.

Try with iftop and compare the results on your own. PLEASE BRING BACK THE FLOW MONITOR AVAILABLE ON UTM9. Live connection is useless and horrible!

Has anyone tried using NetFlow?  (Administration/Netflow)?  It seems that might be more useful and there are multiple backend software packages available to analyze the data.

Hi,

Thank you for your suggestion, you get a 30 day trial and then have to pay for it and it is not cheap. You need to setup another server to store the data and the licence is more expensive than your XG. Not much value to a small business.

Ian

Hi,

Thank you for your suggestion, you get a 30 day trial and then have to pay for it and it is not cheap. You need to setup another server to store the data and the licence is more expensive than your XG. Not much value to a small business.

Ian