XII. Firewall/Security Features
ExpiredSmartMonitor Usage Guide
The DrayTek SmartMonitor software is a network usage monitoring tool that operates by monitoring traffic through the router using the mirror port functionality.
Any traffic that SmartMonitor is able to identify is then categorised along with the time of access and the user's IP address (this can be configured to show a more useful name / group if required).
It is recommended to read the confirmation page that loads on initial access to SmartMonitor to understand the implications of this network monitoring.
- Menu Options
- How to identify users in SmartMonitor
- How to identify bandwidth usage in SmartMonitor
- How to identify which sites have been accessed by which users in SmartMonitor
- How to generate reports with SmartMonitor
Menu Options
System | This menu contains settings for the user accounts (privileges and passwords) The Setting menu contains SMTP settings for configuring SmartMonitor to send email notifications or reports. It can also be used to configure the storage limitations for SmartMonitor, set the network interface that is used for monitoring and set the Timezone used by the SmartMonitor server. The Event Log contains details of changes made to the SmartMonitor server and user login / logout events |
User Setting | This menu contains the IP addresses that SmartMonitor has found on the network and facilities to categorise them into groups or enable / disable monitoring for the IP addresses The Group/Department menu is for adding and configuring groups to categorise / identify the IP addresses. The User List menu lists the IP addresses that SmartMonitor has identified, it is possible to add IP addresses to existing groups, enable/disable recording for the IP addresses and give names to the IP addresses so that they can be identified as users / computers. The Tree View provides an easy way to view group settings once they have been configured. |
Service Analysis | This menu contains all of the traffic types that SmartMonitor can identify which makes it possible to look at the specific types of traffic i.e. HTTP, Mail that have been used for the specified time period (using the settings in the upper right of each page), showing which IP address / user has utilised those services. |
User Analysis | This menu has reporting information to show which IP addresses / users have used which traffic type along with the bandwidth usage. The Records & Report section shows which user has used which traffic type or can be used to generate a Daily Report which will show how much bandwidth has been used for the time period specified. The User By Traffic section shows all users listed in order of bandwidth used for the time period specified. The Top 10 section shows an overview of all traffic types and which users have used each service the most for the time period specified. |
Report | This menu provides overall usage reports and statistics as well as detailed reports for specified users / groups. The Service Traffic section shows the traffic types / total bandwidth used over a daily time period, so that peak times can be identified. The Statistics section is used to show current traffic flow along with storage utilisation on the SmartMonitor computer. The Customised Group Report & Customized User Report sections can be used to set up ongoing reports that would be sent via email or exported to PDF. |
How to identify users in SmartMonitor
Because SmartMonitor monitors based on IP address, it is recommended to fix the IP addresses given out by the router so that client PCs will stay on the same IP. This is done from the LAN - Bind IP to MAC section in the router's web interface, simply select the IP addresses to be monitored from the list on the left then add it to the Bind IP to MAC list, those will then always receive those IP addresses via DHCP from the router:
The SmartMonitor software lists all IP addresses under the User Setting – User List section.
On this page, it's possible to set which IP addresses are recorded and to name IP addresses – in networks where there are more IP addresses than the router supports, it's possible to untick the Recording option for un-needed IP addresses. This is useful for devices that wouldn't need to be monitored such as the router IP and other network infrastructure IP addresses.
It's useful to add the IP addresses to groups or to name them, this can be done from the User Setting – Group Setting section by clicking the Add Group icon:
On that page, the group can be named, the types of traffic being monitored can be selected and at the bottom of that page, the IP addresses to be monitored can be selected. Once an IP has been selected here, it can be named to make it easier to identify in SmartMonitor:
How to identify bandwidth usage in SmartMonitor
The main page shows a view of the day's usage but to check other days or find more specific information, go to User Analysis – User By Traffic and select the day to check; that will show the total bandwidth usage although it can be set to specific traffic types using the drop-down box in the upper right of the page. This shows the IP addresses (or names) that have used traffic in order of usage:
It is also possible to check the top ten users that have used the different traffic types from the User Analysis – Top 10 page and the previous 20 days can be checked using the drop-down box in the upper right of the page:
To check the bandwidth usage for a specific user or group, go to User Analysis – Records & Report, select the Group from the drop-down box in the upper right of the page then select either the user or group to check the traffic for. That will then pop-up an additional window showing a daily usage graph along with which traffic types contributed to the bandwidth used. This also allows for selecting which of the last 20 days to view the bandwidth usage for, using the drop-down box in the upper right of the page.
If the traffic type shows as Other, this is usually encrypted traffic that SmartMonitor cannot identify but is still counted towards the total bandwidth usage.
To check what time periods the most bandwidth is being used, go to Report – Service Traffic for an overall view:
To check it for a specific user, go to User Analysis – Records & Report, select the user / group and select Daily Report from the drop-down. The time period to observe can then be selected on the pop-up window.
How to identify which sites have been accessed by which users in SmartMonitor
To see the sites accessed by all users of the network over a single day, go to Service Analysis – HTTP which will show that day's usage. It's possible to search over specific days or check the last 20 days using the options in the upper right of the page.
To see which sites have been accessed by a specific user, go to User Analysis – Records & Report, select the Group to view then select the user to view and select the traffic type (HTTP in this example). It is then possible to select which day to view site access for or perform a search:
Another way to check which sites are being accessed is from the User Analysis – Top 10 page, to do that, click on the user / IP showing in the Top 10 list for HTTP traffic and it will show a percentage for the number of times specific sites were accessed for the day selected.
How to generate reports with SmartMonitor
Many of the results pages such as the Service Analysis – HTTP page have options to export the entries shown for the time period as a PDF, via email or to print:
It is possible to generate more detailed reports from the Report - Customized User Report and Report - Customized Group Report sections, to do that, click Browser and select the Users / Groups from the list, hold down Ctrl when selecting to select multiple entries then click OK.
Back on the Customized Report page, select the Service types to be monitored – for instance the “HTTP Traffic and Counts” will show the pages accessed and how many times by the specified users for the specified time period.
The Top 10 entries will show the ten most accessed URLs / IP addresses for each user / group.
The Duration can be set to only monitor specific time periods such as office hours.
The Export setting can be set to do either PDF or E-Mail:
PDF – This exports a one-time report that is then downloaded by the browser for the time period specified. Click on the From and To boxes to select from a calendar menu that will appear when those boxes are clicked.
E-Mail – This exports the report on a schedule of either Daily, Weekly or Monthly, that is then sent via email to the email address specified for the user account that has specified this report. The email address for the user is configured under System – Admin for each user account. The user account logged in when making the report will be the one that the email reports are sent to.
- First Published: 06/05/2014
- Last Updated: 22/04/2021
Copyright © 2024 DrayTek