Report for concurrent user/machine connections both live and historical

Not sure I understand what you're looking for, Chris.  Maybe youcould share the question that would be answered by having such a report.

Cheers - Bob

Hi Bob,

Basically "how many concurrent users are using the Web Protection (proxy) at any given moment" and "how many are using it at any given point historically" (up to a point of course)
i.e. on the old Sophos Web Appliances (old I know) there used to be a table/graph just on the dashboard that shows concurrent connections peak that day.
Does that exist on the UTM?
Thanks

I'm fairly certain that those statistics aren't tracked, Chris.  The best you can do are the 'Network Usage' graphs and the 'Bandwidth Usage' tab sorted by "Top Services."

Cheers - Bob

Thanks Bob

In there, I found graphs for "concurrent connections" at the bottom - what sort of connections are they then? In and out? Web?
i.e. for me they seem very very high, like 47k and we only have around 4k machines!

The connection tracker sees new connections between IPs where the connection passes through the UTM.  It doesn't see connections inside subnets connected to the UTM.  Apparently, each of your machines makes a little less than 12 connection on average.

Cheers - Bob