Fortinet black logo

Administration Guide

Netflow Dashboard

Netflow Dashboard

The Netflow Dashboard provides an overview of NetFlow traffic statistics.

The Netflow Dashboard contains the following widgets:

Netflow Status Displays the Status of this feature , Flow Count, Average Flow Per Second and Sampler ID Count. The statistics are broken down into last minute, hour, and day for users to view the volume and flow count coming into FortiNDR.
Netflow Botnet Displays the Netflow botnet traffic detections. Netflow botnet detections are matched against the FortiGuard botnet database. Discovery of botnet detections are matched against destination IPs and ports within a flow. Click the widget to expand it to view a more detailed page about the detections.

Netflow Sampler Statistics

Displays the flow count over time.

Netflow Top Talker

Displays the IP addresses that are responsible for the most network traffic in a given time period.

The Top Talker feature provides a method to identify the devices or IP addresses that are consuming the most bandwidth, allowing network administrators to troubleshoot performance issues and optimize network usage.

Netflow Top Protocol

Displays the most used transportation layer protocols in terms of bandwidth consumption. Protocols can include TCP, UDP, ICMP, among others.

The Top Protocols feature provides a method for understanding which protocols are using the most bandwidth, helping network administrators optimize network usage and potentially identify security concerns.

Netflow Latest Sources Displays the Flow activity statistics from active samplers within a selected time frame. The widget allows users to select one day, one week, or one month.
Netflow Traffic Volume

Displays aggregated Ingress and Egress traffic volume of each Sampler within a selected time frame.

For example, if sampler ID 1.1.1.1 has flows from different source(s) and destination(s), the widget will summarize the total ingress and egress traffic.

Customizing the Netflow Dashboard

You can add or remove widgets from the dashboard, or re-size a widget to fit the dashboard.

To remove a widget from the dashboard:

Click the widget menu and select Remove.

Alternatively, you can click Add Widget in the banner and then click the Remove button next to the widget name in the Add NDR Dashboard Widget pane.

To add a widget to the dashboard:
  1. In the banner, click Add Widget. The Add NDR Dashboard Widget pane opens.
  2. Click Add next to the widget name and the click OK.
To re-size a widget in the dashboard:

In the widget menu, click Resize and then select the widget length.

Netflow Dashboard

The Netflow Dashboard provides an overview of NetFlow traffic statistics.

The Netflow Dashboard contains the following widgets:

Netflow Status Displays the Status of this feature , Flow Count, Average Flow Per Second and Sampler ID Count. The statistics are broken down into last minute, hour, and day for users to view the volume and flow count coming into FortiNDR.
Netflow Botnet Displays the Netflow botnet traffic detections. Netflow botnet detections are matched against the FortiGuard botnet database. Discovery of botnet detections are matched against destination IPs and ports within a flow. Click the widget to expand it to view a more detailed page about the detections.

Netflow Sampler Statistics

Displays the flow count over time.

Netflow Top Talker

Displays the IP addresses that are responsible for the most network traffic in a given time period.

The Top Talker feature provides a method to identify the devices or IP addresses that are consuming the most bandwidth, allowing network administrators to troubleshoot performance issues and optimize network usage.

Netflow Top Protocol

Displays the most used transportation layer protocols in terms of bandwidth consumption. Protocols can include TCP, UDP, ICMP, among others.

The Top Protocols feature provides a method for understanding which protocols are using the most bandwidth, helping network administrators optimize network usage and potentially identify security concerns.

Netflow Latest Sources Displays the Flow activity statistics from active samplers within a selected time frame. The widget allows users to select one day, one week, or one month.
Netflow Traffic Volume

Displays aggregated Ingress and Egress traffic volume of each Sampler within a selected time frame.

For example, if sampler ID 1.1.1.1 has flows from different source(s) and destination(s), the widget will summarize the total ingress and egress traffic.

Customizing the Netflow Dashboard

You can add or remove widgets from the dashboard, or re-size a widget to fit the dashboard.

To remove a widget from the dashboard:

Click the widget menu and select Remove.

Alternatively, you can click Add Widget in the banner and then click the Remove button next to the widget name in the Add NDR Dashboard Widget pane.

To add a widget to the dashboard:
  1. In the banner, click Add Widget. The Add NDR Dashboard Widget pane opens.
  2. Click Add next to the widget name and the click OK.
To re-size a widget in the dashboard:

In the widget menu, click Resize and then select the widget length.