Bandwidth utilization report

[Goppi]

I want to find out how much bandwith every internal client has used to specific destinations (based on certain rules) to create a kind of accounting. I know that you can use the accounting logging to log the information, but what I'm searching for is a reporting tool, that can analyze this data (with a huge amount of entries) and create a report based on some rules (day/night, protocols, average usage, peaks, etc) - automatically and regularly. Has anybody done something like this already ?

cheers,

Goppi

 

[rn4it]

We use Webtrends Firewall suite, it does all that and you can schedule email based reports.

 

[Goppi]

yeah, i had a test-installation of webtrends - but I just don't like the cost-benefit-ratio for what I want to use it...

But anyway, thanks for the response...

 

[wanyph]

hi all,

i want to create a report of bandwidth utilization per user. but when i export the log file (for webtrends firewall suite), no information about
bandwidth is included.

can you tell me how to generate a detailed logfile?

thanx
mewi

 

[ChrisAC]

So what are you using for bandwidth management?

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[wanyph]

hi,

i have checkpoint ng, and i want detailed reports
how much bandwidth,ports,... each user is consuming.

i also wanna see the top-surfers.


thx,
mewi

 

[ChrisAC]

If you are talking about Firewall-1, it doesn't manage bandwidth and so you won't get bandwidth reports. What you need is Floodgate-1 (

http://www.checkpoint.com/products/accelerate/floodgate-1.html).

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[wanyph]

hi,

thx,
but that´s not what i want.
I want to see what are the top-internet users in our
company.
I want to generate reports like this:

http://download.netiq.com/Library/SampleReports/FWS_Complete/FWSCompleteCluster.htm

http://download.netiq.com/Library/S...CompleteCluster_06_b.htm#TopFtpInternalSource

but the logfile of my checkpoint ng has too few information
in it for generating such great reports.

I want to know ehat I have to adjust on my firewall to create more detailed logfiles


thanxs,
mewi

 

[ChrisAC]

What information do you want out of your Checkpoint logs? Remember that it will log by rule so if you have a rule that allows all the network access outbound for anything, that is all the will show in the logs. The more granular your rule base, the more detail you will get in the logs. It really comes down to how you have configured the firewall.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[RachelD]

Sounds like a web filtering application would work for you. Look at Websense, SurfControl Web Filter, etc. Many of these applications provide the ability to both monitor type of traffic and consumption of bandwidth in addition to restricting allowed protocols, restricting access to various types of sites and so on.

Depending on which software you choose, you can get it so that it is integrated with the operation of your firewall, or you can simply let a monitor hang off your network and look at the traffic.

 

[Goppi]

Mewi,

you need to change the tracking setting for your internet rule from "Log" to "Account" - With this setting the firewall also logs bandwidth usage, time, etc...

Goppi

 

[wanyph]

thanks goppi!

that´s the answer, I waited for!!!!


I will try it tomorrow, when I am back at work.

mewi

 

[alexlights]

how are you geting the information out of the firewall? I have 3com switches here and i was wondering if I could do the same type reporting. I know who is connected to what port, so if i could just get activity on the ports, that would work for me.

_ALEX