I've been getting different reports set up using the NTA, and am down to just a couple that I can't seem to figure out how to set up.
For starters, we would like to see what our endpoints are talking to outside of our network only, as in Internet traffic going outbound. I have one report set up for inbound, that was easy, but to filter out our internal network traffic to just endpoints to Internet is proving quite difficult to figure out.
Secondly, we would like to see our internal network only, no Internet, and subnet to subnet. Basically see what and who is talking to what and who, etc.
We're using NTW 3.8.0, and it's on our only router. All our traffic goes through the router, whether it be our internal network only, or all traffic period.
Please and thanks!
Have you tried creating IP Address groups to match the networks you have? This will definitely help.
Is there a reason you are still running NTA 3.8? I suggest you upgrade to 3.9.