In this video you will be able to get a first look at the new App Flow Monitor in SonicOS Enhanced 18.104.22.168.
Traditional firewalls include default monitoring features that do not offer great visibility into the users' traffic.
When it comes to monitoring active connections for a particular computer or user, a traditional firewall normally displays the protocols detected per source and destination IP addresses.
If available, content filtering data(e.g. URLs accessed by the users) and antivirus/IPS events(threats detected) may be displayed; possibly the web traffic may be logged per user.
For better monitoring typically an add-on or external device is needed.
The limited default monitoring options prevent the network administrator from being able to detect and react to threats in real time or to understand what applications access the network.
The App Flow Monitor feature of SonicWALL firewalls provides administrators with incoming and outgoing network data monitoring.
It gives the network administrators the ability to see what actually happens on the network; what applications are being used, by who, when and how or what threats and type of threats have been detected.
From SonicWALL firewall’s management interface, on the left-side menu click Dashboard and then click its App Flow Monitor sub-menu; the Dashboard/App Flow Monitor page will open.
On this page there are a couple of tabs; each tab will display specific information:
Within each tab you can normally click the objects listed, e.g. users or applications to get more details about them. Or you can filter the view to display only specific information.