Enable Reports

FortiWAN’s Reports provides long-term and advanced data analysis by processing system logs to database. The original logs FortiWAN generates contains raw data which is yet to be processed, and Reports can organize and analyze these data into readable statistics.

Every FortiWAN unit embeds the Reports system (See “Reports”), or the Reports could be also a stand-alone system running on a computer. Here is the settings to specify the ways of log push for Reports servers.

Embedded Reports

Enable Reports DB         :      Enable the embedded Reports (See “Reports”). Logs will be processed directly to the database stored in the built-in hard disk. Analysis and statistics are displayed via Web UI.

The Reports displays no data without enabling this.

Stand-alone Reports

Enable Reports UDP    :   Enable it to push logs to specified stand-alone Reports server.

Recipient IP Address : Specify location of the stand-alone Reports server that logs are pushed to. This field is available only if Enable Reports UDP is checked.

The stand-alone Reports displays no data without enabling this.

A stand-alone Reports and the embedded Reports can run at the same time, but both servers use the same logs.

Events

Select the log type for FortiWAN to send to Reports.

l Firewall l Virtual Server l Bandwidth Usage l Connection Limit l Multihoming l Tunnel Routing

Selected logs here will be pushed to embedded Reports and stand-alone Reports, if any or both of them are enabled.

Enable Reports

Reports

Reports is the built-in monitoring and traffic pattern analysis tool for instant status of WAN connections and traffic statistics analysis. MIS personnel can perform offline and more detailed analysis of the data to gain insight into user traffic patterns for better network design and management policy definition. However, FortiWAN generates large volumes of raw activity logs during the process of monitoring its functions. For long-term or trend analysis, Reports is an online companion tool that greatly simplifies the analysis of the data. Reports Features l Provides historical detail and reporting over longer periods of time (See “Create a Report”).

l Provides more fine-grained subcategories of analysis and reports (See “Advanced Functions of Reports: Drill in”). l Provides customized filters on reports (See “Advanced Functions of Reports: Custom Filter”). l Provides instant email of reports in PDF formats (See “Advanced Functions of Reports: Report Email”). l Reports can be saved in PDF format (See “Advanced Functions of Reports: Export”). l Supports user-select report date range (See “Create a Report”). l Supports user-specified backup of original log and database data (See “Reports Database Tool”).

Reports provides analysis and reporting capabilities on device status, top bandwidth utilization and function status. MIS personnel can gain complete understanding of the detailed network statistics via the various reports. Such statistics include, for example, the exact time of failure of every WAN link, the peak rate and amount of bandwidth of every WAN link, the minimum and maximum traffic volume for a given specified day range, the traffic volume and service conditions of a certain server during a specified day range. Bandwidth Usage presents the analysis of how the bandwidth of every WAN link is used: what connections are constructed between which internal IP and external IP hosts, what services operate on the connections, and what and how much traffic is transferred through which WAN link? For example, you can obtain, from Reports analysis, the external traffic destinations from any or all devices inside the LAN or look at what internet servers attracted the most traffic from your enterprise.

It is important to have a solid grasp of the functionality and operational theory of Reports in order to effectively analyze network traffic patterns and various statistics of FortiWAN for optimal management policy definition.

Reports reporting function is calendar-based (in the upper right portion of the UI screen). Reporting can be done for a specific day, by highlighting that date in the calendar. Reporting can be done over a range of dates by specifying the start date and the end date on the Calendar.

Reports reporting function is divided into three categories and eighteen subcategories:

• Device Status: Dashboard, Bandwidth, CPU, Session, WAN Traffic, WAN Reliability, WAN Status, TR Reliability and TR Status (See “Device Status”).
• Bandwidth Usage: In Class, Out Class, WAN, Service, Internal IP and Traffic Rate (See “Bandwidth Usage”). l Function Status: Connection Limit, Firewall, Virtual Server and Multihoming (See “Function Status”).

To make those data and analysis available, please enable Reports via Log > Reports (See “Enable Reports“) or Reports > Settings > Reports (See “Settings > Reports“).

Create a Report

Create a Report

Report’s reporting function is calendar-based (in the upper right portion of the UI screen). Reporting can be done for a specific day, by highlighting that date in the calendar. Reporting can be done over a range of dates by specifying the start date and the end date on the Calendar.

Enable Reports

Please complete the necessary setting to enable FortiWAN Reports via Log > Reports (See “Enable Reports”) or Reports > Settings > Reports (See “Settings > Reports”), or data is unavailable for Reports.

Select a Report Type

On the left of the main page is the Category Area where you can select a report type.

Specify a Date or Date Range

At the upper right corner of the Display Area exists a date selector where you can specify a single date or date range. Click on the magnifier icon next to the date selector to start with date selection.

l Time between 00:00 to 23:59 (of a selected date) l Days from start to end if Date Range specified (max 90 days)

Single Date

Start date:

• Click on the field under “Start date” to call up a calendar for further selection.
• Select a date from the calendar, and reports will be generated on the selected date from 00:00 to 23:59. The selected date is highlighted in white, while the other dates are displayed in gray, and today’s date is circled in yellow.
• Click the right or left arrow to go to the next or previous month. l Click Apply to complete date selection, and reports will then be generated accordingly. l Choose a different report type from the Category Area to generate reports on the same date selected if needed.

Date Range

To select a date range:

Export and Email

• Click the checkbox between Start date and the End date, and then Start time, End date and End time will become available for selection (as shown below):
• Put a Start date and End date by clicking the input field and selecting from the calendar. l Input the Start time and End time in the format of HH:MM. Note that the duration cannot exceed 90 days. l Click Apply to complete date range selection and start generating reports.
• Choose a different report type from the Category Area to generate reports on the same date range selected if needed.

Export and Email

All reports generated by FortiWAN can be exported in PDF format to your local computer; just simply click the Export button on the upper side of any report page, and select PDF.

All reports generated by FortiWAN can be sent to users via email. Reports saved in PDF format can be sent out as email attachments. Click the Email button on the right upper corner of any report page to edit settings of the report email. In the settings dialog, you may send current report through email immediately or arrange a scheduled email for it. No matter which report page you’re at, you can always click the Email button on that page to send the current report through email, or the Schedule button to get the report email scheduled (see Report Email).

Device Status

The Device Status report shows the top-level view of the analysis of the traffic flowing through FortiWAN. Device Status includes 9 categories showing the average data rate through FortiWAN, the number of sessions (connections) in use, the status of WAN links and TR connections and FortiWAN hardware statistics.

Dashboard

The Dashboard is a palette containing the chart-based summary of FortoiWAN’s system information and hardware states. Bandwidth usage, CPU, memory and HD storage usages, concurrent sessions, WAN link states, the peer information in HA deployment, FortiWAN firmware version, model and bandwidth capability are summarized here for your reference at a glance. For long-term and deep look inside the items, individual report page gives the details.

The statistics of bandwidth, session , CPU and memory usages on the dashboard come from the Reports database, just like all the other report pages, are counted every 5 minutes. The data of WAN link state, peer information and hard disk on the dashboard is updated instantly when it is refreshed every time. You can set an appropriate refresh time interval for the dashboard (See “Dashboard Page Refresh Time”).

System Information

The System Information panel located at the upper-right corner gives the information of current FortiWAN firmware version, model and bandwidth capability.

Total Bandwidth

The line chart in Total Bandwidth panel displays the distribution of traffic (inbound and outbound) passed through FortiWAN over the past one hour. The horizontal (x) axis is graduated in minutes, and the vertical (y) axis is graduated in bps (average) to indicate the bandwidth usage. The distributions of inbound and outbound traffic are marked with different color. Moving the mouse to any point of the distribution will display the exact traffic generated at the time. Moving the mouse over the line chart and clicking it will redirect you to the Bandwidth page (See “Bandwidth”).

The bar chart aside the distribution displays the percentage of the traffic generated in the past five minutes. The bandwidth capability (denominator) used to calculate the percentage is the sum of the transfer speed (down stream and up stream) of every enabled WAN link (defined in Network Setting, see “Configuring your WAN”). For example, if there are two enabled WAN links defined with 10 Mbps and 20 Mbps down stream, and 5 Mbps and 10 Mbps up stream respectively, the bandwidth capability used to calculate the percentage will be 45 Mbps. This bandwidth capability changes as a WAN link being enabled or disabled. The bars are marked with different color for inbound and outbound traffic. 50% and 80% are the two waterlines used in the bar chart to alert administrators to the exceedance. The bar is marked with green if the percentage of bandwidth usage is less than 50%, with orange if it is between 50% an 80%, and with red if it exceeds 80%.

Session

The line chart in Session panel displays the distribution of sessions amount that FortiWAN processed over the past one hour. The horizontal (x) axis is graduated in minutes, and the vertical (y) axis is graduated in 1’s to indicate the session amount. Moving the mouse to any point of the distribution will display the exact session amount generated at the time. Moving the mouse over the line chart and clicking it will redirect you to the Session page (See “Session”).

The bar chart aside the distribution displays the percentage of the sessions amount generated in the past five minutes. The concurrent session capability (denominator) used to calculate the percentage depends on your FortiWAN model. 50% and 80% are the two waterlines used in the bar chart to alert administrators to the exceedance. The bar is marked with green if the percentage of session amount is less than 50%, with orange if it is between 50% an 80%, and with red if it exceeds 80%.

CPU

The line chart in CPU panel displays the distribution of FortiWAN’s CPU usage over the past one hour. The horizontal (x) axis is graduated in minutes, and the vertical (y) axis is graduated in % to indicate the CPU usage.

Moving the mouse to any point of the distribution will display the exact percentage of CPU used at the time. Moving the mouse over the line chart and clicking it will redirect you to the CPU page (See “CPU”).

The bar chart aside the distribution displays the percentage of CPU usage in the past five minutes. 50% and 80% are the two waterlines used in the bar chart to alert administrators to the exceedance. The bar is marked with green if the CPU usage is less than 50%, with orange if it is between 50% an 80%, and with red if it exceeds 80%.

Memory

The line chart in Memory panel displays the distribution of FortiWAN’s memory usage over the past one hour. The horizontal (x) axis is graduated in minutes, and the vertical (y) axis is graduated in % to indicate the memory usage. Moving the mouse to any point of the distribution will display the exact memory usage at the time.

The bar chart aside the distribution displays the percentage of memory usage in the past five minutes. 50% and 80% are the two waterlines used in the bar chart to alert administrators to the exceedance. The bar is marked with green if the memory usage is less than 50%, with orange if it is between 50% an 80%, and with red if it exceeds 80%.

WAN Link State

The WAN Link State panel displays the state of every FortiWAN’s WAN link. The number of WAN links displayed here varies depending on the model of the FortiWAN unit. Taking FortiWAN 200B for example, it supports 25 WAN link connections in maximum (See “WAN link and WAN port”). Each WAN link is color-coded to indicate its state.

Peer Information

Peer information displays the state of slave unit for a HA deployment (See “FortiWAN in HA (High Availability) Mode”).

Hard Disk

FortiWAN’s Reports functions with a database system and necessary log data stored in the built-in hard disk. Disk space is being consumed by increasing report database. Once the disk space is ran out, Reports will fail to continue log processing. Disk usage statistics viewer here reports the disk space usage (%), so that an appropriate cleanup (See “Disk Space Control” and “Reports Database Tool”) can be took to low disk space.

Bandwidth

The Bandwidth report shows the traffic distribution by the date range defined. Your FortiWAN model is rated by its data throughput (and number of simultaneous connections). This report will help you determine if you are using the correct FortiWAN model and bandwidth capability for the data volumes at our location.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

Bandwidth Distribution:

• X axis: Time between 00:00 to 23:59 (of a selected date). Days from start to end if Date Range specified (max 90 days) .

Y axis: Bandwidth in Kbps or Mbps. l Green indicates inbound data rate. l Blue indicates outbound data rate.

• Clicking on Both, In or Out buttons at the right upper corner of the graph allows you to see bandwidth distribution in different directions:
• Both: Displays both inbound and outbound bandwidth distribution. l In: Displays only inbound bandwidth distribution. l Out: Displays only outbound bandwidth distribution. l Moving the mouse over the graph will display time, date and corresponding traffic distribution (as shown below):

Statistics Table:

• Lists the average inbound and outbound traffic rate distributed by the date range defined. This is the numerical presentation of the same information in the Bandwidth Distribution Charts.
• Time: Time periods or dates if a date range is defined. l Inbound bps: Traffic originating from outside of FortiWAN, going into the internal port. l Outbound bps: Traffic originating from inside of FortiWAN, going to the external port.

CPU

The CPU report shows the distribution of CPU usage of FortiWAN by the date range defined. CPU usage is a measure of how much traffic is being managed or how much services the FortiWAN is required to do on that traffic. Sustained usage near 80% is a good indicator that a larger FortiWAN model is required to handle the required traffic and services load. Use this chart to compare your target maximum usage with the actual usage over time.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”). CPU Usage Distribution

l X axis: Time between 00:00 to 23:59 (of a selected date). Days from start to end if Date Range specified (max 90 days). l Y axis: CPU usage in %. l Moving the mouse over the graph will display time, date and corresponding CPU usage in percentage.

Statistics Table

• Lists the CPU usage distributed in percentage (%) by the date range defined. This is the numerical presentation of the same information in the CPU Usage Distribution Charts.
• Time: Time periods or dates if a date range is defined. l % Usage: CPU usage in %.

Session

The Session report shows the distribution of sessions (connections) by the date range defined. Your FortiWAN model is rated by the number of simultaneous connections it can process (among other things as noted above). This report will help you determine if you are using the correct FortiWAN model for the number of connections in use by your users.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

Session Amount Distribution:

• X axis: Time between 00:00 to 23:59 (for a selected date). Days from start to end if Date Range specified (max 90 days).
• Y axis: Number of Sessions in 1,000’s. l Moving the mouse over the graph will display time, date and corresponding number of sessions.

Statistics Table:

• Lists the number of sessions distributed by the date range defined. This is the numerical presentation of the same information in the Session Distribution Charts.
• Time: Time periods or dates if a date range is defined. l Count: Number of Sessions.

WAN Traffic

The WAN Traffic report shows the traffic distribution of every FortiWAN’s WAN link by the date range defined. This report will help you to determine if WAN links are capable for the data volumes.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”). WAN Traffic Distribution

• Traffic distributions of every WAN links are presented individually. l X axis: Time between 00:00 to 23:59 (of a selected date). Days from start to end if Date Range specified (max 90 days). l Y axis: Bandwidth in Kbps or Mbps. l Green indicates inbound data rate. l Blue indicates outbound data rate.

Clicking on Both, In or Out buttons at the right upper corner of the graph allows you to see bandwidth distribution in different directions:

• Both: Displays both inbound and outbound bandwidth distribution. l In: Displays only inbound bandwidth distribution. l Out: Displays only outbound bandwidth distribution. l Moving the mouse over the graph will display time, date and corresponding traffic distribution.

WAN Reliability

The WAN Reliability report shows the statistics on the failures happened on FortiWAN WAN links.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”). Statistics Table

l Lists the times of failure happened on WAN links by the date range defined. l WAN: WAN links that are enabled on FortiWAN. (Disabled WAN links will not be shown in the table). l Fails: Times of failure happened on this WAN link. l Drill in: Click to check the status (OK and Fail) over time on this WAN link (See “Drill In”).

WAN Status

FortiWAN supports various numbers of WAN links, for example, FortiWAN 700 supports 25 WAN links, FortiWAN 5000 and FortiWAN 6000 support 50 WAN links. The WAN Status report shows the statuses on every FortiWAN’s WAN link. The various statuses are defined as below.

• OK: WAN link is enabled, configured and connected physically. l Fail: WAN link is enabled and configured, but disconnected. l Disable: WAN link is not enabled from FortiWAN Web UI.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”). Statistics Table

• Lists the statuses of every WAN link by the date range defined. l Time: Time periods or dates if a date range is defined. l WAN: The WAN link. l Status: The status happened on the WAN link at the time.

TR Reliability

Tunnel Routing (TR) is FortiWAN’s important function used to construct intranets between multiple LANs anywhere in the world. Tunnel Routing also boosts performance by supporting link aggregation and fault tolerance over multiple links for services such as VPN and live video streaming. A Tunnel Group represents the configuration of Tunnel Routing on FortiWAN between two specific sites; it includes related internal IP addresses of both sites and routing policies between sites (See “Tunnel Routing”).

The TR Reliability report shows the statistics on the failures happened on FortiWAN’s TR links. Please reference FortiWAN User Manual for more information about Tunnel Routing.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”). Statistics Table

• Group: Tunnel Group configured on FortiWAN; the failed TR link belongs to. Select “Group” as primary sorting via clicking on the column title “Group”.
• Local IP: Local IP address of the failed TR link in the Tunnel Group. Select “Local IP” as primary sorting via clicking on the column title “Local IP”.
• Remote IP: Remote IP address of the failed TR link in the Tunnel Group. Select “Remote IP” as primary sorting via clicking on the column title “Remote IP”.
• Fails: the count of failures occurring on the IP pair in this Tunnel Group for the reporting period. l Drill in: Click to check the status (OK and Fail) of the TR link (See “Drill In”).
• Note: A “▲” or “▼” is shown aside the column header while the column is selected as primary sorting, e.g. Group ▲. The sorting order will be switched by clicking on the same column header.

TR Status

The TR Status report shows the statuses of every FortiWAN’s TR link (See “Tunnel Routing”) by date the range defined.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

The various statuses are defined as below.

l OK: TR link is enabled, configured and connected physically. l Fail: TR link is enabled and configured, but disconnected. l Disable: TR link is not enabled from FortiWAN Web UI. Statistics Table l Lists the statuses of every TR link by the date range defined. l Time: Time periods or dates if a date range is defined. l Local IP: Local IP address of the TR link. l Remote IP: Remote IP address of the TR link. l Status: the OK/Fail Status of this Source IP -> Destination IP pair at that time.

Bandwidth Usage

This report category is the core function of the Reports and also serves as the basis for traffic analysis to gain insights for better policy management. This category can further be divided into In Class, Out Class, WAN, Service, Internal IP and Traffic Rate.

The Bandwidth Usage Report includes: Charts (upper) and Statistics Table (lower).

Pie Charts display respective percentage of all the traffic patterns that sorted (default) by the total data volume (IN

+ OUT) shown on the page. The Pie Charts display will change depending upon which column in the Statistics Table is selected for primary sorting. This Pie Chart shows the percentage of the traffic pattern of the top 10 items only, which might not match the percentage value listed in the Statistics Table. Use it only as a visual reference to see who the major users are.

• Bar Charts illustrate the total volume of each traffic pattern shown on the page, and the percentage of each traffic pattern out of total traffic. The Bar Chart display will change depending upon which column in the Statistics Table is selected for primary sorting.
• The Statistics Table is the numerical presentation of the same information illustrated in the Pie chart and Bar Charts. The traffic statistics includes information of total traffic, inbound traffic, outbound traffic and percentage of total traffic. l Inbound Bytes: The volume of traffic originating from outside of FortiWAN, going into the internal network. l Outbound Bytes: The volume of traffic originating from inside of FortiWAN, going to the external network. l Total Bytes: (Default primary sorting) The volume of total traffic = Inbound Bytes + Outbound Bytes.

The statistics table lists 10, 20, 50 or 100 entries sorted by default in declining order by total data volume. By default the first screen shows the top 10 entries, but navigation buttons and a direct-entry page box at the lower right corner of the screen allow you to examine all items found. The default number of rows to be listed on the report page can be defined in account settings.

The Statistics Table may be re-sorted by Inbound Bytes, Outbound Bytes or Total Bytes, by selecting the appropriate column header. The Pie and Bar charts will reformat to reflect the selected traffic measurement.

Note that the percentage of total traffic shown in the Statistics Table may not be the same as that shown on the Pie Chart. The Statistics Table shows the percentage of total traffic in all traffic patterns, while the Pie Chart only shows the total of the top 10 traffic users.

See also:

• Report: Inclass l Report: Outclass l Report: Service l Report: WAN
• Report: Internal IP l Report: Traffic Rate

Inclass

This report shows the statistics of each inbound class as defined in FortiWAN’s Bandwidth Management function (See “Bandwidth Management”). Each class is a classification (by service, by IP address and etc.) of incoming traffic passed through FortiWAN. This statistic will help you realize if the Bandwidth Management policies of FortiWAN are running well, or if any adjustment is necessary for the specified bandwidth class.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

• Pie Chart: Pie chart of traffic statistics is generated based on Inbound Classes of FortiWAN’s Bandwidth Management.
• Bar Chart: Bar chart statistics show the actual data volume used by the top 10 Inbound Classes.

Statistics Table:

• List the Inbound Class the most traffic being classified into. l In Class: The Inbound Classes defined in FortiWAN. l Inbound Bytes: The volume of inbound traffic of the Inbound classes. l Outbound Bytes: The volume of outbound traffic of the Inbound Classes. l Total Bytes: The volume of total traffic of the Inbound Classes (Inbound Bytes + Outbound Bytes).
• Note: Select “Inbound Bytes”, “Outbound Bytes” or “Total Bytes” as primary sorting by clicking on the column title. A “▲” is shown aside the column header while the column is selected as primary sorting, e.g. Inbound Bytes ▲.
• % Total Bytes: The volume of total traffic of the Inbound Classes in %. l % Inbound Bytes: The volume of inbound traffic of the Inbound Classes in %. l % Outbound Bytes: The volume of outbound traffic of the Inbound Classes in %.
• Only one of the three statistics data (% Inbound Bytes, % Outbound Bytes, or % Total Bytes) will be displayed in the statistics table depending on the primary sort column.
• This page and this table describe total traffic volume, not traffic rate. Data transferred are measured in KBytes, MBytes or GBytes over the period of time selected.
• Drill in (See “Drill In”):
• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected In Class, shown by Out Class, WAN, Service, Internal IP, External IP, Internal Group, External Group and Traffic Rate (Trend) via the selected policy In Class:
• Out Class – Out Classes that are associated with this In Class.
• WAN – WAN links that are associated with this In Class. l Service – Services (L3-L7) that are associated with this In Class. l Internal IP – Any monitored internal IP addresses that are associated with this In Class. l External IP – Any monitored external IP addresses that are associated with this In Class.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) that the internal IP addresses are associated with this In Class.
• External Group – Any monitored external IP group (set up under the Settings menu) that the external IP addresses are associated with this In Class. l Traffic Rate: bandwidth distribution generated by this In Class by the date range defined.

Outclass

This report shows the statistics of each outbound class as defined in FortiWAN’s Bandwidth Management function (See “Bandwidth Management”). Each class is a classification (by service, by IP address and etc.) of outgoing traffic passed through FortiWAN.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

• Pie Chart: Pie chart of traffic statistics is generated based on Outbound Classes of FortiWAN’s Bandwidth Management.
• Bar Chart: Bar chart statistics show the actual data volume used by the top 10 Outbound Classes.

Statistics Table:

• List the Outbound Class the most traffic being classified into. l Out Class: The Outbound Classes defined in FortiWAN. l Inbound Bytes: The volume of inbound traffic of the Outbound Classes. l Outbound Bytes: The volume of outbound traffic of the Outbound Classes. l Total Bytes: The volume of total traffic of the Outbound Classes (Inbound Bytes + Outbound Bytes).
• Note: Select “Inbound Bytes”, “Outbound Bytes” or “Total Bytes” as primary sorting by clicking on the column title. A “▲” is shown aside the column header while the column is selected as primary sorting, e.g. Inbound Bytes ▲.
• % Total Bytes: The volume of total traffic of the Outbound Classes in %. l % Inbound Bytes: The volume of inbound traffic of the Outbound Classes in %. l % Outbound Bytes: The volume of outbound traffic of the Outbound Classes in %.
• Only one of the three statistics data (% Inbound Bytes, % Outbound Bytes, or % Total Bytes) will be displayed in the statistics table depending on the primary sort column.
• This page and this table describe total traffic volume, not traffic rate. Data transferred are measured in KBytes, MBytes or GBytes over the period of time selected.
• Drill in (See “Drill In”):
• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected policy Out Class, shown by In Class, WAN, Service, Internal IP, External IP, Internal Group, External Group and Traffic Rate (Trend) via the selected policy Out Class:
• In Class – In Classes that are associated with this Out Class. l WAN – WAN links that are associated with this Out Class. l Service – Services (L3-L7) that are associated with this Out Class. l Internal IP – Any monitored internal IP addresses that are associated with this Out Class. l External IP – Any monitored external IP addresses that are associated with this Out Class.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) that the internal IP addresses are associated with this Out Class.
• External Group – Any monitored external IP group (set up under the Settings menu) that the external IP addresses are associated with this Out Class. l Traffic Rate: bandwidth distribution generated by this Out Class by the date range defined.

WAN

This report shows the statistics of traffic passed through FortiWAN via the WAN Links.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

• Pie Chart: Pie chart of traffic statistics is generated based on WAN links defined on FortiWAN. l Bar Chart: Bar chart statistics show the actual data volume used by the top 10 WAN links.
• Statistics Table :
• List the WAN links on the FortiWAN that traffic passed through.
• WAN: The WAN links defined on the FortiWAN. l Inbound Bytes: The volume of inbound traffic of the WAN links. l Outbound Bytes: The volume of outbound traffic of the WAN links.

• Total Bytes: The volume of total traffic of the WAN links (Inbound Bytes + Outbound Bytes).
• Note: Select “Inbound Bytes”, “Outbound Bytes” or “Total Bytes” as primary sorting by clicking on the column title. A “▲” is shown aside the column header while the column is selected as primary sorting, e.g. Inbound Bytes ▲.
• % Total Bytes: The volume of total traffic of the WAN links in %. l % Inbound Bytes: The volume of inbound traffic of the WAN links in %. l % Outbound Bytes: The volume of outbound traffic of the WAN links in %.
• Only one of the three statistics data (% Inbound Bytes, % Outbound Bytes, or % Total Bytes) will be displayed in the statistics table depending on the primary sort column.
• This page and this table describe total traffic volume, not traffic rate. Data transferred are measured in KBytes, MBytes or GBytes over the period of time selected.
• Drill in (See “Drill In”):
• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected WAN link, shown by In Class, Out Class, Service,

Internal IP, External IP, Internal Group, External Group and Traffic Rate (Trend) via the selected WAN link:

• In Class – In Classes that traffic is passed through this WAN link. l Out Class – Out Classes that traffic is passed through this WAN link. l Service – Services (L3-L7) that traffic is passed through this WAN link. l Internal IP – Any monitored internal IP addresses that traffic is passed through this WAN link. l External IP – Any monitored external IP addresses that traffic is passed through this WAN link.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) that traffic is passed through this WAN link.
• External Group – Any monitored external IP group (set up under the Settings menu) that traffic is passed through this WAN link. l Traffic Rate: bandwidth distribution generated by this WAN link by the date range defined.

Services

This report shows the statistics of traffic passed through FortiWAN by various services.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

• Pie Chart: Pie chart of traffic statistics is generated based on the traffic incurred by Services. l Bar Chart: Bar chart statistics show the actual data volume used by the top 10 Services.
• Statistics Table:
• List the Services generating (as a source or termination) the most traffic. l Service: The Service that traffic passed through FortiWAN. l Inbound Bytes: The volume of inbound traffic of the Service. l Outbound Bytes: The volume of outbound traffic of the Service. l Total Bytes: The volume of total traffic of the Service (Inbound Bytes + Outbound Bytes).
• Note: Select “Inbound Bytes”, “Outbound Bytes” or “Total Bytes” as primary sorting by clicking on the column title. A “▲” is shown aside the column header while the column is selected as primary sorting, e.g. Inbound Bytes ▲.
• % Total Bytes: The volume of total traffic of the Service in %. l % Inbound Bytes: The volume of inbound traffic of the Service in %. l % Outbound Bytes: The volume of outbound traffic of the Service in %.
• Only one of the three statistics data (% Inbound Bytes, % Outbound Bytes, or % Total Bytes) will be displayed in the statistics table depending on the primary sort column.
• This page and this table describe total traffic volume, not traffic rate. Data transferred are measured in KBytes, MBytes or GBytes over the period of time selected.
• Drill in (See “Drill In”):
• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected service, shown by In Class, Out Class, WAN,

Internal IP, External IP, Internal Group, External Group and Traffic Rate (Trend) via the selected service:

• In Class – In Classes where this Service traffic is classified into. l Out Class – Out Classes where this Service traffic is classified into. l WAN – WAN links that this Service traffic passed through. l Internal IP – Any monitored internal IP addresses that are associated with this Service. l External IP – Any monitored external IP addresses that are associated with this Service.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) that the internal IP addresses are associated with this Service.
• External Group – Any monitored external IP group (set up under the Settings menu) that the external IP addresses are associated with this Service. l Traffic Rate: bandwidth distribution generated by this Service by the date range defined.

Internal IP

This report shows the statistics of traffic passed through FortiWAN by Internal IP addresses.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

• Pie Chart: Pie chart of traffic statistics is generated based on traffic incurred (as a source or termination) by Internal IP addresses.
• Bar Chart: Bar chart statistics show the actual data volume used by the top 10 Internal IP addresses.
• Statistics Table:
• List the Internal IP addresses generating (as a source or termination) the most traffic. l IP: The Internal IP addresses. l Inbound Bytes: The volume of inbound traffic of the Internal IP addresses. l Outbound Bytes: The volume of outbound traffic of the Internal IP addresses. l Total Bytes: The volume of total traffic of the Internal IP addresses (Inbound Bytes + Outbound Bytes).
• Note: Select “Inbound Bytes”, “Outbound Bytes” or “Total Bytes” as primary sorting by clicking on the column title. A “▲” is shown aside the column header while the column is selected as primary sorting, e.g. Inbound Bytes ▲.
• % Total Bytes: The volume of total traffic of the Internal IP addresses in %. l % Inbound Bytes: The volume of inbound traffic of the Internal IP addresses in %. l % Outbound Bytes: The volume of outbound traffic of the Internal IP addresses in %.
• Only one of the three statistics data (% Inbound Bytes, % Outbound Bytes, or % Total Bytes) will be displayed in the statistics table depending on the primary sort column.
• This page and this table describe total traffic volume, not traffic rate. Data transferred are measured in KBytes, MBytes or GBytes over the period of time selected.
• Drill in (See “Drill In”):
• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected Internal IP address, shown by In Class, Out Class, WAN, Service, External IP, Internal Group, External Group and Traffic Rate (Trend) via the selected Internal IP address:
• In Class – In Classes that are associated with this Internal IP address. l Out Class – Out Classes that are associated with this Internal IP address.
• WAN – WAN links that are associated with this Internal IP address. l Service – Services (L3-L7) that are associated with this Internal IP address. l External IP – Any monitored external IP addresses that are associated with this Internal IP address.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) where this Internal IP address belongs to.
• External Group – Any monitored external IP group (set up under the Settings menu) that the external IP addresses are associated with this Internal IP address. l Traffic Rate: bandwidth distribution generated by this Internal IP address by the date range defined.

Traffic Rate

This report shows the statistics of traffic passed through FortiWAN by Traffic Rate.

Create a report for a specific day or over a range of dates (See “Create a Report”).

Export reports and send reports through email (See “Export and Email”).

Bandwidth Distribution:

• X axis: Time between 00:00 to 23:59 (of a selected date). Days from start to end if Date Range specified (max 90 days). l Y axis: Bandwidth in Kbps or Mbps. l Green indicates inbound data rate. l Blue indicates outbound data rate.
• Clicking on Both, In or Out buttons at the right upper corner of the graph allows you to see bandwidth distribution in different directions:
• Both: Displays both inbound and outbound bandwidth distribution. l In: Displays only inbound bandwidth distribution. l Out: Displays only outbound bandwidth distribution. l Moving the mouse over the graph will display time, date and corresponding traffic distribution.

Statistics Table:

• List the average inbound and outbound traffic rate distributed by the date range defined. This is the numerical presentation of the same information in the Bandwidth Distribution Charts.
• Time: The time periods or date ranges defined. l Inbound bps: The inbound traffic rate in the time periods or date ranges. l Outbound bps: The outbound traffic rate in the time periods or date ranges.

Function Status

Drill in:

• Clicking the magnifier icon located under the “Drill in” column in the statistics table allows you to perform an additional ‘drill-down’ analysis on traffic for the selected Time period , shown by In Class, Out Class, WAN, Service, Internal IP, External IP, Internal Group and External Group via the selected Time period:
• In Class – In Classes that are associated within this time period. l Out Class – Out Classes that are associated within this time period. l WAN – WAN links that traffic passed through within this time period. l Service – Services (L3-L7) that are associated within this time period. l Internal IP – Any monitored internal IP addresses that are associated within this time period. l External IP – Any monitored external IP addresses that are associated within this time period.
• Internal Group – Any monitored internal IP group (set up under the Settings menu) that the internal IP addresses are associated within this time period.
• External Group – Any monitored external IP group (set up under the Settings menu) that the external IP addresses are associated within this time period.