Irrelevant traffic by user, firepower management center

[kh.farhad]

Hi,

I'm using an asa firepower 5515-x and I've configured captive portal for users to authenticate to go to internet. In dashboard of management center I can see some widgets, one of them is traffic by user where I can see authenticated users' total KB. The problem is that this amount of traffic is so lower than the real amount because I tested a download on my PC and a small amount of traffic appeared there from my user. And also KB/s is so lower than real, for example when I'm getting 1 MB/s it shows only 0.02 KB/s. And at last the most traffic shown is related to Unknown user. Is there a way to make it happen to show the real traffic per user?

[Aastha Bhardwaj]

Hi,

You can edit on what parameter you want to display the traffic like : Total traffic etc . Ideally it should display the total amount of traffic for that particular user but sometime sit takes a while to poll the exact numbers on widgets and the data is refreshed every 5 minutes. Are you able to see your username in the data ?

Mostly unknown data is like for Guest user the user info is not there with your domain controller.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[kh.farhad]

Hi Aastha,

As you can see in the attached picture I have set it to aggregate on Total Traffic (KB/s) but the amount of traffic is too low. And yes those are LDAP users that I have grayed out. I have monitored system for hours but still there's no relevant data shown.

[Aastha Bhardwaj]

Hi,

I would advise you to open up a TAC case for same , because we might need to dive more into details.

Regards,

Aastha Bhardwaj

[kh.farhad]

Hi,

I opened a TAC case but still no reply on the case, I'm still waiting.

[kh.farhad]

Doesn't anyone know where the problem is? I want exact traffic amount used by users.

[belgarioz]

I had the same problem.

I solved it in the "log section" of the acess policy, setting it to both log at the beginning and at the end of connection