https://community.checkpoint.com/t5/SmartEvent/Orion-Application-Discovery/m-p/107299#M18 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Orion-Application-Control.png" style="width: 921px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/10119i5441D87731AE8A17/image-size/large?v=v2&amp;px=999" role="button" title="Orion-Application-Control.png" alt="Orion-Application-Control.png" /></span></P> <P>Application Control support SolarWinds app from late 2016.</P> <P>there are two major signatures related:</P> <UL> <LI>SolarWinds - represent the usage of the web application</LI> <LI>SolarWinds-NPM - represent the managment (Orion or other) instance in the network.</LI> </UL> <P>in this dashboard, you are able to understand the traffic usage of the SolarWinds app, focusing on exfiltration flow from the network using the backdoor in the Orion instance.&nbsp;</P> Tue, 30 Dec 2025 08:24:56 GMT Oren_Koren 2025-12-30T08:24:56Z https://community.checkpoint.com/t5/SmartEvent/Orion-Application-Discovery/m-p/107299#M18 57 Tue, 30 Dec 2025 08:24:56 GMT https://community.checkpoint.com/t5/SmartEvent/Orion-Application-Discovery/m-p/107299#M18 Oren_Koren 2025-12-30T08:24:56Z