View connection details

In the Network Traffic report, you can view detailed information about traffic that was allowed or dropped by Enterprise Threat Protector.

How to

  1. In the navigation menu, select Monitoring > Activity. Click the Network Traffic tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Activity > Network Traffic.
  2. Filter events as needed. For more information see Filter data based on date and time and Filter network traffic data.
  3. If you haven’t done so already, select a dimension.
  4. In the list of grouped events, click the arrow icon that is associated with a dimension value. For example, if you selected Domain, click the arrow icon to see the associated traffic. Logged connections appear in a table format.
  5. Click the information button. Connection details appear in a separate window. You can use the arrow keys on your keyboard to navigate to other connections in the table and show details.