The Network Analytics window helps you analyze the state and quality of the connections of a site to the Cato Cloud. The data in this window shows data for traffic inside and outside the secure tunnel between the site and the Cato Cloud.
Note
Note: Cato calculates the link connectivity data every millisecond, however the minimum bucket size in the Network Analytics window is 5 seconds. It is possible that packets are discarded, even though the analytics in this window doesn't show 100% usage.
To show the network analytics for a site:
-
From the navigation menu, click Network > Sites and select the site.
-
From the navigation menu, click Site Monitoring > Network Analytics
This example and the table that follows explain the fields in the Overview section:

Item |
Name |
Description |
---|---|---|
1 |
Network Analytics site |
Select the site that is showing network analytics data |
2 |
Network Analytics fields for the site |
|
3 |
Devices |
Select which device analytics to display. See below, Explanation of the Network Analytics for a Site |
4 |
Overview and Details tabs |
Select to show the graphic Overview of the links, or the Details of the data |
5 |
Bucket Granularity |
Amount of time for a specific data point. In the example above, each data point represents 10 minutes of aggregated traffic |
6 |
Pin for Overview and Details tabs |
The Overview and Details tabs are unpinned by default, when they are pinned, then these tabs are still shown when you scroll down |
7 |
Link connection status |
Data of an individual link for the site
|
8 |
Aggregated connection status |
Aggregated data of the links for the site The aggregated bar shows the status of the link with the best health for that bucket granularity. For example, if the link for ISP A had a green status and the link for ISP B had an yellow status, the aggregated bar shows a green status. |
Note
Note: The ISP data in this window is provided by ip2location.com
-
Status - the site is Connected or Disconnected to the Cato Cloud
-
HA Status - for sites with Socket high availability (HA), status of the HA configuration (otherwise, shows N/A if the site)
-
Master - indicates whether the Primary or Secondary Socket is actively sending/receiving traffic
-
Socket or IPsec- Socket type or IPsec connection
-
PoP - PoP the site is connected to
-
Distance - round trip time between the site and the Cato Cloud
-
#Hosts - number of hosts in the LAN for this site
-
Devices - select the Socket data that is displayed in the Network Analytics window:
-
Merged - combines data for the primary and secondary Socket
-
Primary - only shows data for the primary Socket
-
Secondary - only shows data for the secondary Socket
-
The following graphs display data related to traffic inside the secure tunnel to the Cato Cloud:
-
Avg Throughput - average upstream and downstream throughput for each link (over the length of the bucket)
-
Max Throughput - maximum upstream and downstream throughput, and average throughput for each link (over the length of the bucket)
-
Packet Loss - packet loss percentage over the last mile inside the tunnel
-
Distance - round trip time between the site and the Cato Cloud inside the tunnel
-
Tunnel Age - total time that the current DTLS tunnel between the Socket and the PoP is connected
-
Jitter - difference in time delay in milliseconds (ms) between data packets
-
Flows - flow counts during the specified period of time
-
Hosts - host count during the specified period of time
This is an example of the Throughput graphs:

These graphs show analytics that are related to the last mile connection (outside of the secure tunnel) between the Socket site and the Cato Cloud. The goal of this data is to show you the quality of the ISP link to the Cato Cloud:
-
Last Mile Packet Loss - packet loss percentage over the last mile outside the tunnel
-
Last Mile Distance - round trip time (RTT) between the site and the Cato Cloud outside the tunnel
Comparing Application Analytics and Network Analytics
The analytics and metrics for the Application Analytics screen and the screens for network analytics (such as Monitoring > Sites Overview) can have a small discrepancy because the data is calculated differently.
-
For network analytics data (including the account Metrics API query):
-
Upstream and downstream bytes are counted for encapsulated packets (including DTLS headers overhead)
-
Upstream and downstream data for all flows related to the given tunnel are aggregated together
-
-
For the Application Analytics data:
-
Upstream and downstream bytes are counted for non-encapsulated packets (before DTLS encapsulation).
-
Upstream and downstream data is displayed per application
-
Comments
0 comments
Please sign in to leave a comment.