Traffic
FortiCWP Traffic is an intuitive graphical interface allowing you to interact with all types of sources accessing the cloud resource thus giving an overall diagnostic of the cloud instance health. Follow the steps below to access Traffic.
Access Traffic through Resource
- From FortiCWP navigation pane, go to Resource
- Filter the desired cloud account by filtering through account/region/project.
- For resource type that has traffic enabled (ex. EC2 , RDS instances, etc.), there is a traffic option when moving the mouse over menu icon under Operations.
- An interactive cloud data traffic map will be shown with inbound and outbound traffic of all sources accessing the virtual machine.
- Clicking on the description of the inbound/outbound traffic will show detail of the source that is accessing the virtual machine.,
For example, clicking on the traffic coming from a suspicious IP will give a list of Violated Policies.
Select one of the violated policies will show the Traffic Details of the brute force attack on the virtual machine. In this way, the cloud administrator can take remediation quickly against the intrusion.
Access Traffic through Alert
- From FortiCWP navigation pane, go to Alert.
- Filter the desired cloud account by filtering through alert options.
- Click on the arrow key next to the alert.
- For Network type alert, in the summary field there will be a link to traffic, click on the traffic link to re-direct to Traffic page.
- For Risk Assessment type alert, in the summary field, click on the object to re-direct to the cloud resource page to access Traffic.