This article depicts how to find which local or external IP address utilizes more bandwidth on the network using App Visualization feature in the SonicWall appliance.
Login to the firewall as Administrator.
Navigate to AppFlow | Flow Reporting | Settings.
Ensure that the following are enabled.
Ensure that Report Connections is set to All.
Enable Real-Time Data Collection.
Enable Aggregate AppFlow Report Data Collection.
Enable App Flow To Local Collector.
Click Accept. A reboot will be required.
Navigate to Dashboard | Real-Time Monitor to check which applications are using the most bandwidth.
Also navigate to Dashboard | AppFlow Monitor. Click the Initiators tab and select the check box to the IP address to monitor.
Select Filter View to only see results for the IP address selected. In our case we've selected the internal IP 192.168.150.208. Click on the Applications tab. All results will be filtered to the internal IP 192.168.150.208.
Click the Auto Y-Scaling option to view applications in real time that the internal IP address is consuming.