Find all devices talking to external IP addresses

The following steps show you how to find all of the external IP addresses that your devices are talking to. You can then see if any devices are making or receiving unauthorized connections from other devices outside of your network.

  1. Log into the Web UI on the Discover or Command appliance.
  2. Click Metrics at the top of the page.
  3. Click Activity Groups in the left pane.
  4. Click TCP Devices. At the top of the page, the External Accepted and External Connected metrics display how many IP addresses outside of your internal network are actively connected to all of your network devices.
  5. Click the blue metric value for either metric.
  6. In the Drill Down by… section, select Group Member. A detail metric page appears and shows all of the names of your network devices and the number of connections to external IP addresses.
  7. Click on a device name that you want to investigate. A protocol page for that device appears, which contains metrics related to the device.
Published 2017-11-14 20:34