App Scope Overview
The App Scope reports provide graphical visibility into the following aspects of your network:
Changes in application usage and user activity Users and applications that take up most of the network bandwidth Network threats
With the App Scope reports, you can quickly see if any behavior is unusual or unexpected, and helps pinpoint problematic behavior; each report provides a dynamic, user-customizable window into the network. The reports include options to select the data and ranges to display. On Panorama, you can also select the Data Source for the information that is displayed. The default data source (on new Panorama installations) uses the local database on Panorama, which stores logs forwarded by the managed firewalls; on an upgrade, the default data source is the Remote Device Data (managed firewall data). To fetch and display an aggregated view of the data directly from the managed firewalls, you now have to switch the source from Panorama to Remote Device Data.
Hovering the mouse over and clicking either the lines or bars on the charts switches to the ACC and provides detailed information about the specific application, application category, user, or source.
App Scope Summary Report
The Summary report displays charts for the top five gainers, losers, and bandwidth consuming applications, application categories, users, and sources.
To export the charts in the summary report as a PDF, click Export ( ). Each chart is saved as a page in the PDF output.
App Scope Change Monitor Report
The Change Monitor report displays changes over a specified time period. For example, the figure below displays the top applications that gained in use over the last hour as compared with the last 24-hour period. The top applications are determined by session count and sorted by percentage.
App Scope Change Monitor Options
This report contains the following options.
Change Monitor Report Option Description
Top Bar
Top 10 Determines the number of records with the highest measurement included in the chart.
Application Determines the type of item reported: Application, Application Category, Source, or Destination.
Gainers Displays measurements of items that have increased over the measured period.
Losers Displays measurements of items that have decreased over the measured period.
New Displays measurements of items that were added over the measure period.
Dropped Displays measurements of items that were discontinued over the measure period.
Filter None Applies a filter to display only the selected item. None displays all entries.
Count Sessions and Count Bytes Determines whether to display session or byte information.
Sort Determines whether to sort entries by percentage or raw growth.
Export Exports the graph as a .png image or as a PDF.
Bottom Bar
Compare (interval) Specifies the period over which the change measurements are taken.
App Scope Threat Monitor Report
The Threat Monitor report displays a count of the top threats over the selected time period. For example, the figure below shows the top 10 threat types for the past 6 hours.
App Scope Threat Monitor Report Options
Each threat type is color-coded as indicated in the legend below the chart. This report contains the following options.
Threat Monitor Report Option Description
Top Bar
Top 10 Determines the number of records with the highest measurement included in the chart.
Threats Determines the type of item measured: Threat, Threat Category, Source, or Destination.
Applies a filter to display only the selected type of items.
Determines whether the information is presented in a stacked column chart or a stacked area chart.
Export Exports the graph as a .png image or as a PDF.
Bottom Bar
Specifies the period over which the measurements are taken.
App Scope Threat Map Report
The Threat Map report shows a geographical view of threats, including severity.
App Scope Threat Map Report Options
Each threat type is color-coded as indicated in the legend below the chart. Click a country on the map to Zoom In and then Zoom Out as needed. This report contains the following options.
Threat Map Report Option Description
Top Bar
Top 10 Determines the number of records with the highest measurement included in the chart.
Incoming threats Displays incoming threats.
Outgoing threats Displays outgoing threats.
Applies a filter to display only the selected type of items.
Zoom In and Zoom Out Zoom in and zoom out of the map.
Export Exports the graph as a .png image or as a PDF.
Bottom Bar
Indicates the period over which the measurements are taken.
App Scope Network Monitor Report
The Network Monitor report displays the bandwidth dedicated to different network functions over the specified period of time. Each network function is color-coded as indicated in the legend below the chart. For example, the image below shows application bandwidth for the past 7 days based on session information.
App Scope Network Monitor Report Options
The report contains the following options.
Network Monitor Report Option Description
Top Bar
Top 10 Determines the number of records with the highest measurement included in the chart.
Application Determines the type of item reported: Application, Application Category, Source, or Destination.
Filter Applies a filter to display only the selected item. None displays all entries.
Determines whether to display session or byte information.
Determines whether the information is presented in a stacked column chart or a stacked area chart.
Export Exports the graph as a .png image or as a PDF.
Bottom Bar
Indicates the period over which the change measurements are taken.
App Scope Traffic Map Report
The Traffic Map report shows a geographical view of traffic flows according to sessions or flows.
App Scope Traffic Map Report Options
Each traffic type is color-coded per the legend below the chart. This report contains the following options.
Threat Map Report Option Description
Top Bar
Top 10 Determines the number of records with the highest measurement included in the chart.
Incoming threats Displays incoming threats.
Outgoing threats Displays outgoing threats.
Determines whether to display session or byte information.
Zoom In and Zoom Out Zoom In and Zoom Out of the map.
Export Export the graph as a .png image or as a PDF.
Bottom Bar
Indicates the period over which the change measurements are taken.

Related Documentation