Traffic Visualization to find high bandwidth usage

[fkao]

We currently use PA-500 routers at all of our locations.  Is there a quick way to either visualize or get a report on traffic usage? Ideally, we'd like to be able to at a glance see what IP is maxing out our bandwidth when we start running low on internet or VPN bandwidth.

We did try experimenting with Pan(w)achrome, but we didn't have any luck getting it to work properly.

[MSharma · Accepted solution]

Yes , it is possible to some extent  . Just go to Monitor -- >Manager Custom Reports -->Add

You can select specific source and destination , applications and there other options too.

Just click on Run now and you will be able to see this report. It is also possible to schedule this report. Please check this and let us know if it was helpful.

[parmas]

In fact I believe this document explains a good approach on getting to understand bandwidth utilization. Graphic Traffic Monitoring for Interfaces - QoS Statistics

[jkim2]

use the ACC (delayed and not real time as it needs to index) , try custom reports , setting up and enabling Qos (will show apps, security rules but not specific source ips)  on the interface also shows live stats.

[Dz3015]

That document was my first thought parmas

Definately refer to the Graphic Traffic Monitoring for Interfaces - QoS Statistics Document for ideas or as previously mentioned, start playing with custom reports

[fkao]

Thanks everyone.  Msharma's response is closest to what we're looking for. Much more useful to be able to see what IP is causing bottlenecks without turning on QOS.

For those of you that send the link to Graphic monitoring, are there any downsides to turning on QOS?

[Dz3015]

It shouldn't affect anything as long as you don't put any traffic shaping profiles on.  You can classify traffic so you can view the information on it, just don't put shaping policy on it.