Cloud Firewall Advanced Analytics Events

Cloud Firewall Advanced Analytics Events

Cloud Firewall Events log all traffic that is steered to Netskope through Cloud Firewall.

Note

Your account must be enabled for Cloud Firewall and an additional license is required to use Cloud Firewall Events.

To view Cloud Firewall Events, go to Advanced Analytics > Explore > Data Collection > Cloud Firewall Events.

CFW_NAA_Events.jpg

To learn more about the dimensions and fields: Exploring Data in Reports

Use the Cloud Firewall Discovery Dashboard to get started reporting on Cloud Firewall Events. You can filter and sort this information and save the dashboard to your library.

CFW_Dashboard.jpg

The following table shows the default Cloud Firewall Discovery Dashboard default tiles.

Tile NameDescription
Discovered UsersTotal number of discovered users.
Hosts & Ports DiscoveredCloud Firewall policy in use, with host and ports, number of users, number of connections, and total byte traffic.
Policies AccessedTotal number of policies accessed.
Top Blocked ServicesShows the blocked applications (IP Protocol, Destination Port, Destination IP).
Top Users by Total BytesShows the top users by bandwidth consumption, with the “Allow” policy action.
Top Users/Source IP by Blocked ConnectionsShows top users/source IP blocked by number of connections.
Total Bandwidth ConsumptionTraffic flow by total bytes (GB).
Trend of Total Bandwidth Consumption by Top UsersShows the top users by bandwidth consumption with the “Allow” policy action.
Trend of Total Bandwidth Consumption by Top Business UnitsShows the top user groups by bandwidth consumption with the “Allow” policy action.
Trend of Total Bandwidth Consumption by Traffic DirectionShows the flow of byte traffic by policy (uploads and downloads).
Trend of Network ActivitiesShows the trend for the following network activities: users, events, and total bytes (GB).

To learn more about dashboards: Netskope Library and Creating Reports (Dashboards)

Share this Doc

Cloud Firewall Advanced Analytics Events

Or copy link

In this topic ...