The Logical Topology console displays your network as a bubble chart of network connection points, grouping objects based on which upstream device interface they are connected to, with comparative bubble size used to illustrate traffic volume. This console can be filtered by Device Traffic, Device Count, Device Type, or No Devices, which displays only networking devices.
You can mouse over a device’s bubble to see its Name, IP Address, and traffic volume data. You can also double-click on any bubble to zoom it to a reasonable size, as some may be much smaller or larger based on their traffic volume.
You can sort the bubbles by Bytes Sent/Recieved, Packets Sent/Received, Bandwidth, Dropped Bytes, and Sessions. Some options are not available in longer historical data periods.
FortiGates and other networking devices are depicted as boxes. You can mouse over a FortiGate’s box to see its Serial Number, Hostname, and Firmware Version/Build. Also appearing in the FortiGate box is each interface that has devices connected to it, upstream or downstream. You can mouse over the name of an interface to see its IP Address, Network (subnet), and Role.
Information about upstream devices will not be available unless you properly configure the Upstream FortiGate settings in System > Cooperative Security Fabric.
Scenario: Determining which interface is blocking sessions incorrectly
From the Logical Topology console, you can use filters and sorts to narrow down the session data to look for specific information. In this example, the filters will be used to locate an interface that is blocking sessions incorrectly.
- Go to FortiView > Logical Topology.
- Select 1 hour from the Time Display options.
- Select Device Traffic from the dropdown list to the left of the Time Display options, then sort by Sessions (Blocked/Allowed).
- Mouse over each bubble in the chart to see details, looking at the bar next to Sessions (Blocked/Allowed). The blue portion of the bar represents Allowed sessions, and red represents Blocked. Devices connected to the interface that is blocking sessions will have a much larger red area than devices connected to other interfaces.
|Only FortiGate models 100D and above support the 24 hour historical data.|