Using Interface graphs

Use the Monitor > Interfaces graphs to monitor network interface throughput. FortiDDoS ports are configured as network interface pairs. You configure odd-numbered ports for the LAN-side connection and even-numbered ports for the WAN-side connection.

The Interfaces graph includes the following information:

• Direction – View Inbound or Outbound traffic

• Graph Period - View the graph for 1 hour to 1 year

• Interface Pair – Varies from 1-2 through 7-8 to 1-2 through 15-16 depending on the model

• Y-Axis scale – Linear or Logarithmic

• Throughput – Ingress/Egress traffic rates selectable in packets per second (Packets) or bits per second (Bits)

FortiDDoS displays Ingress/Egress traffic differently from other networking products. In order to show the affect FortiDDoS may be having on traffic in either direction FortiDDoS shows:

• Inbound Ingress traffic from the Internet to FortiDDoS
• Inbound Egress traffic from FortiDDoS to your protected network

This way, you will immediately see if FortiDDoS is dropping packets as they pass through the system. In the screenshot below, it is obvious that the Port 2 Ingress (from the Internet) is higher than the Port 2 Egress (to your protected network).

Conversely:

• Outbound Ingress shows traffic from your protected network to FortiDDoS
• Outbound Egress shows traffic from FortiDDoS to the Internet

Again, this will immediately show if FortiDDoS is influencing the traffic as it passes through the system.

At the shortest 1-hour Graph Period, the Interfaces graph displays the average data rate of Ingress and Egress packets for each 30-second Data Resolution Period. As the Graph Period lengthens, the Data Resolution Period also increases and displays the maximum average data rate seen during each Data Resolution Period within the Graph Period.

For example, when looking at the 1-hour Graph Period you see only 1 x 30-second Data Resolution Period displaying 1Gbps at 14:31:30, with no other periods showing any traffic. If you change to the 1-hour Graph Period, 1 x 5-minute Data Resolution Period (at 14:35:00) will show 1Gbps.

Note: Interfaces statistics are not maintained per SPP. You cannot view by SPP, and Interfaces statistics are not reset when you reset SPP statistics. Interfaces statistics are global data that gets reset only when you perform a complete factory reset and/or reformat the log disk.

Before you begin:

• You must have Read permission for the Monitor menu.
• Refer to Reading Monitor graphs to understand the graphs in detail.

To display the graphs:

1. Go to Monitor > Interfaces > {Port-Pair selection}.