Capacity and traffic insights

You can modify the preferences for Capacity and Traffic-related insights. These insights help monitor firewall performance, detect anomalies, and identify potential capacity risks.

Procedure

Step 1

From the Security Cloud Control Home page, click Firewall.

Step 2

In the left pane, click Insights & Reports > Settings.

Step 3

Click Capacity & Traffic Analysis.

Step 4

Enable the toggle buttons for the insights you want to monitor:

  1. Traffic-related insights

    • High traffic caused by elephant flow

    • RAVPN capacity assessment

  2. System health-related insights

    • High data plane CPU usage

    • High snort CPU usage

    • High data plane memory usage

    • High snort memory usage

  3. Anomaly detection-related insights

    • Connections rate (CPS) anomaly

    • Network throughput anomaly

Step 5

For each insight, expand the section and configure the available settings. Depending on the insight, you can select severity levels, configure thresholds, or specify forecast parameters.

Step 6

Click Submit.

After you enable the feature for the organization, you can view the detected anomalies in the Summary page, and the respective widgets are also displayed in the dashboard.