topic How to see the Internet Top Bandwidth Usage based on Source IP in Firewall and Security Management

How to see the Internet Top Bandwidth Usage based on Source IP

Rabindra_Khadka — Fri, 05 Feb 2021 07:32:44 GMT

I have a Checkpoint Firewall as an External Firewall, I have enabled application control and URL filtering. All my users and servers go to the Internet via my Checkpoint External Firewall.

Now, I need to find out the list of top bandwidth usages according to the source IP.

How can I generate show reports, How can I monitor such logs?

Thank You.

Re: How to see the Internet Top Bandwidth Usage based on Source IP

PhoneBoy — Fri, 05 Feb 2021 07:45:35 GMT

This is a standard SmartEvent report.
Go to the Logs and Monitor tab in SmartConsole.
Press the plus along the top then click reports.
Select the Application Control and URL Filtering report.
You can adjust the default time frame as needed.

Re: How to see the Internet Top Bandwidth Usage based on Source IP

Rabindra_Khadka — Fri, 05 Feb 2021 08:55:01 GMT

Is there any custom template that can be imported and generate the bandwidth report as per the requirement. We only want the source IP and bandwidth size for all the services (not just only application and URL filtering.

Re: How to see the Internet Top Bandwidth Usage based on Source IP

PhoneBoy — Fri, 05 Feb 2021 18:25:38 GMT

Clone that report and modify it per your requirements.
Note that we will only be able to provide bandwidth for things where the bytes were logged.
That means every rule will need to have accounting enabled as part of the logs.

Re: How to see the Internet Top Bandwidth Usage based on Source IP

Shira — Wed, 22 Feb 2023 10:07:12 GMT

Hi Rabindra_Khadka,

Did you successfully complete the report on bandwidth utilization per source/ destination? If so, would you be able to share the template or provide any insights that I could use?"