3.2.3.4.4.4. VNC Connections

The VNC (Virtual Network Computing) Connection dashboard display various metrics and insights related to the prevention of lateral movements through VNC and unauthorized remote access.

The view displays the following dashboards:

../../../../../_images/vnc_connections.png

Total VNC connections: Metric showing the total number of VNC connections.
Total VNC clients: Metric showing the total unique clients on VNC connections.
Total VNC servers: Metric showing the total unique servers on VNC connections.
Total VNC connections time evolution: Histogram showing the time evolution of the VNC connections.
VNC access distribution: Tree map showing the distribution of access in VNC connections: HTTP VNC (port TCP 5800) or native VNC (port TCP 5986).
Types of VNC clients: Tree map showing the distribution of the different types of VNC clients.
Total VNC clients time evolution: Histogram showing the time evolution of the total unique VNC clients.

../../../../../_images/vnc_connections2.png

Top VNC 10 clients: Bar chart showing the top 10 VNC clients by the total number of VNC connections. Each bar indicates the VNC connections for a specific client IP address and is segmented by HTTP VNC (port TCP 5800) or native VNC (port TCP 5986).
Top 10 VNC servers: Bar chart showing the top 10 VNC servers by the total number of VNC connections. Each bar indicates the VNC connections for a specific client IP address and is segmented by HTTP VNC (port TCP 5800) or native VNC (port TCP 5986).
VNC connections flow: Sankey diagram showing the flow of VNC connections between source and destination IP addresses. Each line represents the number of connections from a specific source IP on the right. Different colors indicate the various connections paths.

../../../../../_images/vnc_connections3.png

VNC connections details: Table showing the following information of VNC connections: dates, device info (MAC, IP, type), user, switch details (IP, port), and building and network names.