Monitoring a specific IP/host

Overview

If monitoring is required for a specific host/IP in a network, Exinda can deliver statistics around the application, conversation, URL and hosts the specific User/Host has been talking to.

1. Go to Monitor - Hosts and look for the IP/host to monitor. If it find it in this list, simply click on the required host and drill down into it. On this page, a report can be scheduled, or an on-demand report can be generated using the icons on the top right of the frame.

If it is not there, it needs to be added as a network object that can be monitored.
1. Go to Configuration > Objects > Network.
2. Create a new network object with the IP (if it is a single host, use a /32 mask) and enable subnet reporting on it



Once done, it is possible to create a PDF report for this subnet under Monitor - Schedule Reports - Add New PDF Report - Detailed Subnet Report. - Choose the subnet created as a network object. Once it is created, run a scheduled PDF report for it or an on demand PDF Report as need be.

If this is an External subnet of user, ensure that the External Host Monitoring option is turned on. This can be found under Configuration > System > Setup, under the "Monitoring" tab. There is a small table that looks like the following, with a collection of network objects included in it:



This allows for an admin to select subnets to which External Host Monitor can be added for. By default, in v7.0.3 of the firmware and later, External Host Monitoring is turned on for nothing. To add the subnets and individual users, move the subnet from the left menu to the right menu. Doing so will cause additional strain on the database and the monitoring information will require more space in the database, because this will keep a tab of every external host that is a part of or contacts that network object, so it can become a large list very quickly. However, it is the only way to see traffic to or from an external host.