Monitor VOS Devices in Real Time

CPE Interfaces

The CPE Interfaces pane displays information about the device's CPE interfaces and the traffic transiting them. You can display transmission data for all traffic or all SD-WAN traffic, and the data is updated every 3 seconds.

To view details about an interface, click the Eye icon in the Interface column. The following popup window displays at the bottom of the screen:

Click Live Data to display real-time transmission data, either for all traffic or for SD-WAN traffic only. The data on the graph is updated every 3 seconds.

SD-WAN Application Traffic

The SD-WAN Application Traffic pane displays real-time information about the SD-WAN traffic being transmitted between branches and the SD-WAN traffic that is affected by a policy application rule. Select the following fields to display information:

• Remote Branch—Select the SD-WAN branch whose traffic to display. The screen displays traffic for each of that branch's interfaces.
• Application Rule—Select the policy application rule to view traffic affected by the rule.
• Latency—Click to display the interface's latency.
• Jitter—Click to display the interface's jitter.
• Packet Loss—Click to display the interface's packet loss.
• MOS—Click to display the interface's MOS values.

Recent Events

The Recent Events pane displays the recent events and alarms that have occurred on the VOS device, showing a summary of all alarms by severity level—critical, major, minor, indeterminate, and warning.

Click the Details button to display the events and alarms in tabular format.

Click the slider at the top of the pane to have the events and alarms statistics automatically update every 10 seconds.

VOS Device Health Monitor

The Health Monitor pane displays health-related information about the VOS device showing the following:

• Configuration Sync Status—Whether the configuration on the VOS device in in sync with the configuration in the Director node's database
• Reachability Status—Whether the VOS device is reachable from the Director node
• Service Status—Status of the services running on the VOS device
• Interfaces—Number of interfaces that are up (green) and down (red)
• BGP Adjacencies—Number of BGP peering sessions that are up (green) and down (red)
• IKE Status—Number of IKE connections that are up (green) and down (red)
• Paths—Number of SD-WAN paths that are up (green) and down (red)

Click the slider at the top of the pane to have the health statistics automatically update every 10 seconds.

Policy Violations

The Policy Violations pane displays thee number of SD-WAN policy violations that occurred on the VOS device.

Appliance Activity

The Appliance Activity pane displays the top applications that are going through the VOS device

Click the Details button to display the VOS device activity in tabular format.

Click the Tool icon to change the units to use to display VOS device activity:

• Sessions
• Transactions
• Total bytes forward
• Total bytes reverse

SD-WAN

• Sites—All the SD-WAN sites this specific branch has connectivity to.
  
  
   
• Aggregate Traffic—From the branch you are on to another branch or a controller, you can look at the aggregate amount of traffic that has traversed over the encrypted or plain-text tunnels.
  
  
   
• Access Circuits—From the branch you are on to another branch or a controller, you can look at each transport and see how much data has traversed over the plain-text or encrypted tunnels.
   
  
  
• SLA Paths—From the branch you are on to another branch or a controller, you can look at what the current SLA paths by forwarding class to see if they are up, the last time they flapped and whether adaptive monitoring is active.
  
  
   
• SLA Metrics—From the branch you are on to another branch or a controller, what the current SLA metrics are between the devices.
  
  
   
• Policies—How many times a policy has been hit and the transmit and receive bytes/packets.
• Forwarding Profiles—The screen displays the forwarding profile statistics. The data includes the profile name, hit count, valid link drop count, SLA fail drop count, SLA fail forward count, and turn redirect count.
  
  
   
• Sessions—Active number of SD-WAN sessions going through the local VOS device.
  
  
   

To search for SD-WAN sessions, click the eyeball and supply one of the following criteria:

• Source IP address/prefix
• Source port
• Destination IP address/prefix
• Destination port
• Protocol
• Predefined application
• Predefined URL category
  
  

CGNAT

• Rules—Hit count, forward packet/byte count and reverse packet/byte count for configured rules.
  
  
   
• Pools—Usage of configured pools.
  
  
   
• Sessions—NAT sessions created.
  
  

To search for CGNAT sessions, click the eyeball and supply one of the following criteria:

• Source IP address/prefix
• Source port
• Destination IP address/prefix
• Destination port
• Protocol
• Predefined application
• Predefined URL category

NGFW

• Zone Protection—Displays statistics about zone protection profiles.
  
  
   
• DDoS—Displays the DDoS policy details.
  
  
   
• Decryption—Displays decryption filter, with the following choices.
  • Global—Displays all the decryption data within the associated organization.
  • Profile—Displays the decryption data associated with user-defined profiles.
  • Policy—Displays the decryption data associated with user-defined policies.
    
    
     
• Policy—Displays the hit count, forward packet/byte count, reverse packet/byte count, hit rate and inactive session count for configured NGFW rules.
  
  
   
• IP Filtering—Display predefined or custom IP filtering policies.
  
  
   
• URL Filtering—Display URL filtering for the following:
  • Profile—Displays URL traffic data associated with user-defined profiles.
  • Global—Displays URL statistics based on the total URL traffic in an organization.
  • User Category Predefined—The Security Administrator can apply various types of policies based on the predefined URL categories.
  • User Category User-defined—The Security Administrator can create user-defined URL category objects for certain URLs and override predefined URL categorization values.
  • URL Reputation Predefined—The Security Administrator can filter websites based on their predefined reputation values.
  • URL Reputation User-defined—The Security Administrator can define URL reputation values and filter websites.
    
    
     
• Antivirus—Select the antivirus type, scanning profile, and profile type from the drop-down lists.
  
  
   
• Vulnerability—Select the type of vulnerability profile from the drop-down list to view details:
  • User Defined—Refers to profiles as defined by an administrator.
  • Pre Defined—Refers to system-defined profiles.
  • Sessions—Refers to vulnerable sessions during the current system uptime.
    
    
     
• Vulnerability Signature—Look into a profile or rule to see which vulnerabilities it is protecting against.
  
  
  
  To see which signature ID is associated with a policy, click view:
  
  
   
• Security Package—Display the security package details, including the installation date, version, flavor, release date, update type, and installation status.
  
  
   
• Sessions—Display NGFW session details, including the total number of NGFW sessions, number of sessions created, number of sessions closed, total number of NAT sessions, number of NAT sessions created, number of NAT sessions closed, and number of NAT sessions failed.

IPsec

• Overview—IPsec details for the local VOS device.
  
  
   
• Branch to Branch—Connection details from the perspective of an IPsec profile.
  
   
   
• IKE History—IKE history from the perspective of an IPsec profile.
  
   
   
• IKE Security Associations—IKE SA details from the perspective of an IPsec profile.
  
  
   
• IPsec History—IPsec history from the perspective of an IPsec profile.
  
  
   
• IPsec Security Associations—IPsec SA details from the perspective of an IPsec profile.
  
  
   
• Profile Statistics—Profile statistics on the local VOS device from the perspective of an IPsec profile.
  
  

Sessions

Displays session tables for SD-WAN, CGNAT, and NFGW and allows you to search across all the tables.

Networking

• Interfaces—Displays the WAN and LAN interface statistics with respect to the organization associated with the device. The table shows the latest cumulative values at the time of polling after the interface is activated, unless a clear operation is performed. The packets per second (pps) and bits per second (bps) counters average over a maximum of 30 seconds. The pps and bps numbers represent the observable rate of a stable flow. For example, if the traffic drops to zero at the 20th second, the value of these averages drops to zero as well, and so the values of the first 20 seconds are not used to calculate the rate.
  
  
  
  To drill down to display the configured IP address, VRF, and interface status and type, click the eyeball.
  
  
   
• Routes—Display the IPv4 or IPv6 routes in a routing instance.
  
  
   
• BGP—Display the BGP neighbor adjacencies in a routing instance.
  
  
   
• OSPF—Display the OSPF neighbor adjacencies in a routing instance.
  
  
   
• OSPFv3—Display the OSPFv3 neighbor adjacencies in a routing instance.
  • Interface view
    
    
     
  • Neighbor View
    
    
     
• BFD—Display BFD adjacencies in a routing instance.
  
  
• DHCP—Display the DHCP active leases, lease history, and DHCP statistics.
  • Active Leases
    
    
     
  • Lease History
    
    
     
  • DHCP Statistics
    
    
     
• CoS—Display QoS and CoS information.
  • QoS Policy—Layer 2 through Layer 4 QoS policies and their hit count, forward packets/bytes, dropped packets/bytes.
    
    
  • AppQoS Policy—Layer 2 through Layer 7 QoS policies and their hit count, forward packets/bytes, dropped packets/bytes.
    
  • Interfaces—CoS interface details. The details include the transmitted and received packets, number of transmitted packets per second, number of transmitted packets dropped, number of received packets per second, number of received packets dropped, number of transmitted bytes per second, and the number of bytes dropped in transmission.
    
    
• VRRP—Display details about VRRP active and backup, configured priority, and VIP address.
  
  
• Log Export Functionality (LEF)—Display the status and statistics about configured LEF devices and groups.
  
  
   
  • Status
    
    
     
  • Statistics
    
    
     
• ARP—Display ARP information for a routing instance.
  
  
• IP SLA—Display state, address, routing instance, interval, and threshold for a configured IP SLA.