3.1.12.7.3. VPNGW

The VPNGW dashboard displays information about VPN Gateway events, metrics, and statistics.

3.1.12.7.3.1. Header

The three available views in the UNAC Overview section show different information about user devices and network devices. However, they have a common header, which refers to a consistent section at the top of each view that contains shared information.

VPNGW Menu

The menu features different windows, such as Firewall, HAProxy, and Squid. Each window offers distinct dashboard views, allowing you to navigate between these sections. The following topics will explore these menu options in detail.

This header composed of four dashboards allows filtering by Network Device Location, Device Network Name, Device Network CDIRs, Endpoint Types. It will always look for the temporary index that is regenerated every day. In this toolbar, filter your data using KQL syntax.

• Sources: Graphic representation of the VPNGW sources.

• VPNGW types: Graphic representation of the VPNGW types.

• VPNGW types timestamp: VPNGW types timestamp per 3 hours.

• VPNGW Discovered events: Graphic representation of discovered and unknown events.

• VPNGW Discovered hosts: Graphic representation of discovered and unknown devices.

3.1.12.7.3.2. Firewall

The Firewall window displays firewall events and statistics information.

• Firewall hosts: Graphic representation of firewall hosts.

• Firewall actions: Graphic representation of firewall acceptance and rejection.

• Firewall action timestamp: Firewall action timestamp per 3 hours.

• Firewall opennac users: Graphic representation of firewall opennac users.

• Firewall Zone Flow: Graphic representation of the firewall zone flow, where the inside pie chart shows the untrust connection data and the exterior pie chart shows the accepted connection data.

• Top Source Ports: Table that features top source ports, protocols used and count of events.

• Top Source IP: Graphic that represents the top source IP count.

• Top Destination Ports: Table that features top destination ports, protocols used and count of events.

• Top Destination IP: Graphic that represents the top destination IP count.

• Accepted protocols: Graphic representation of accepted protocols (TCP, UDP,ICMP).

• Accepted protocols timestamp: Accepted protocols timestamp per 3 hours.

• Firewall accepted: Table that features the an overview of firewall accepted events.

• Dropped protocols: Graphic representation of the dropped protocols (TCP, UDP, ICMP).

• Dropped protocols timestamp: Dropped protocols timestamp per 3 hours.

• Firewall dropped: Table that features the an overview of firewall dropped events.

• Rejected protocols: Graphic representation of the rejected protocols (TCP, UDP, ICMP).

• Rejected protocols timestamp: Rejected protocols timestamp per 3 hours.

• Firewall rejected: Table that features the an overview of firewall rejected events.

3.1.12.7.3.3. HAproxy

This window displays information about HAproxy servers, actions and requests.

• HAProxy servers: Graphic representation of the HAProxy servers.

• Top HAProxy operations by server: Operations by server timestamp per 12 hours.

• HAPROXY actions: Graphic representation of the HAProxy actions.

• HAProxy action timestamp: HAProxy actions timestamp by 12 hours.

• Top frontend request: Graphic representation of frontend requests.

• Top 20 HAProxy client IPs: Count of Top 20 HAProxy client IPs.

• Top backend request: Graphic representation of Top backend requests.

• HAProxy table: Displays HAproxy requests details such as client IP, action, backend name, frontend name, server name, and count.

3.1.12.7.3.4. Squid

This window displays information about Squid Proxy Server statistics and metrics.

• Top HTTP Proxy Request: Top HTTP proxy requests timestamp per 12 hours.

• Top HTTP Proxy clients by result: Graphic representation of clients by result.

• Top HTTP Proxy method by hierarchy: Graphic representation of top HTTP Proxy method by hierarchy.

• Top HTTP Proxy cache by content type: Graphic representation of top HTTP Proxy cache by content type.

• Users squid: Displays the users in a graphic representation.

• First level url: Graphic representation of first level URLs.

• Second level url: Graphic representation of second level URLs.

• Third level url: Graphic representation of third level URLs.

• Port url: Graphic representation of ports associated with specific URLs.

• Top HTTP Proxy Request Success: Timestamp of the success rate of top HTTP proxy requests.