You can sort the data by bytes, sessions, threats, count, users, content, applications, URLs, malicious, benign, grayware, phishing, file(name)s, data, profiles, objects, portals, gateways, and profiles. The available options vary by widget.

The graphical display options are treemap, line graph, horizontal bar graph, stacked area graph, stacked bar graph, pie chart, and map. The available options vary by widget and the interaction experience varies with each graph type. For example, the widget for Applications using Non-Standard Ports allows you to choose between a treemap and a line graph.

To drill down into the display, click on the graph. The area you click on becomes a filter and allows you to zoom in and view more granular information about that selection.

The detailed view of the data used to render the graph displays in a table below the graph.

You can click and set a local filter or a global filter for elements in the table. With a local filter, the graph is updated and the table is sorted by that filter.

With a global filter, the view across the ACC pivots to display only the information specific to your filter.