Cato Networks Knowledge Base

Search

Showing the Site Network Analytics

The Network Analytics window helps you analyze the state and quality of the connections of a site to the Cato Cloud. The data in this window shows data for traffic inside and outside the secure tunnel between the site and the Cato Cloud.

Note

Note: Cato calculates the link connectivity data every millisecond, however the minimum bucket size in the Network Analytics window is 5 seconds. It is possible that packets are discarded, even though the analytics in this window doesn't show 100% usage.

Using the Overview Section

To show the network analytics for a site:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, click Site Monitoring > Network Analytics

This example and the table that follows explain the fields in the Overview section:

Metrics_Overview_Callouts.png

Item

Name

Description

1

Network Analytics site

Select the site that is showing network analytics data

2

Network Analytics fields for the site

See below, Explanation of the Network Analytics for a Site

3

Devices

Select which device analytics to display. See below, Explanation of the Network Analytics for a Site

4

Overview and Details tabs

Select to show the graphic Overview of the links, or the Details of the data

5

Bucket Granularity

Amount of time for a specific data point. In the example above, each data point represents 10 minutes of aggregated traffic

6

Pin for Overview and Details tabs

The Overview and Details tabs are unpinned by default, when they are pinned, then these tabs are still shown when you scroll down

7

Link connection status

Data of an individual link for the site

  • The green bar shows the active link

  • The light green bar shows the passive link with connectivity to the Cato Cloud

  • A gray bar indicates that the link is down

  • A yellow section within the bar indicates indicates 2% or more packet loss in either upstream or downstream

8

Aggregated connection status

Aggregated data of the links for the site

The aggregated bar shows the status of the link with the best health for that bucket granularity. For example, if the link for ISP A had a green status and the link for ISP B had an yellow status, the aggregated bar shows a green status.

Note

Note: The ISP data in this window is provided by ip2location.com

Explanation of the Network Analytics for a Site

  • Status - the site is Connected or Disconnected to the Cato Cloud

  • HA Status - for sites with Socket high availability (HA), status of the HA configuration (otherwise, shows N/A if the site)

  • Master - indicates whether the Primary or Secondary Socket is actively sending/receiving traffic

  • Socket or IPsec- Socket type or IPsec connection

  • PoP - PoP the site is connected to

  • Distance - round trip time between the site and the Cato Cloud

  • #Hosts - number of hosts in the LAN for this site

  • Devices - select the Socket data that is displayed in the Network Analytics window:

    • Merged - combines data for the primary and secondary Socket

    • Primary - only shows data for the primary Socket

    • Secondary - only shows data for the secondary Socket

Chinese PoP Locations

For PoP locations in China, some locations have multiple PoPs that a site can connect to. For example, Shanghai_DC1 and Shanghai_DC3.

Using the Connectivity Graphs

The following graphs display data related to traffic inside the secure tunnel to the Cato Cloud:

  • Avg Throughput - average upstream and downstream throughput for each link (over the length of the bucket)

  • Max Throughput - maximum upstream and downstream throughput, and average throughput for each link (over the length of the bucket)

  • Packet Loss - packet loss percentage over the last mile inside the tunnel

  • Distance - round trip time between the site and the Cato Cloud inside the tunnel

  • Tunnel Age - total time that the current DTLS tunnel between the Socket and the PoP is connected

  • Jitter - difference in time delay in milliseconds (ms) between data packets

  • Flows - flow counts during the specified period of time

  • Hosts - host count during the specified period of time

This is an example of the Throughput graphs:

Metrics_Throughput.png

These graphs show analytics that are related to the last mile connection (outside of the secure tunnel) between the Socket site and the Cato Cloud. The goal of this data is to show you the quality of the ISP link to the Cato Cloud:

  • Last Mile Packet Loss - packet loss percentage over the last mile outside the tunnel

  • Last Mile Distance - round trip time (RTT) between the site and the Cato Cloud outside the tunnel

Comparing Application Analytics and Network Analytics

The analytics and metrics for the Application Analytics screen and the screens for network analytics (such as Monitoring > Sites Overview) can have a small discrepancy because the data is calculated differently.

  • For network analytics data (including the account Metrics API query):

    • Upstream and downstream bytes are counted for encapsulated packets (including DTLS headers overhead)

    • Upstream and downstream data for all flows related to the given tunnel are aggregated together

  • For the Application Analytics data:

    • Upstream and downstream bytes are counted for non-encapsulated packets (before DTLS encapsulation).

    • Upstream and downstream data is displayed per application

Was this article helpful?

1 out of 2 found this helpful

Comments

0 comments

Please sign in to leave a comment.