SAMI Feature Guide

Technical Documentation>  SAMI Query Examples for Effective Interaction>  Conversational Traffic Analytics via NSM SaaS>  Examples of Conversational Traffic Analytics through the NSM SaaS platform>  Retrieving Information from NSM SaaS by Analyzing User Activities
Table of Contents

Retrieving Information from NSM SaaS by Analyzing User Activities

The SonicWall AI for Monitoring & Insight (SAMI) helps rank network users based on their online activity differently. This helps network administrators manage resources efficiently, identify potential issues, and maintain a secure network environment. The criteria include the volume of connections or sessions, blocked connections, bandwidth consumption, data received and sent, and the use of VPNs.

Here are a few examples of user activity information that you can retrieve using SAMI from Network Security Manager (NSM) SaaS.

The following table describes a few user related activity queries that you can use to retrieve information using SAMI.

Query Response
Top five users by connection or session.

The top five users with the most connections or sessions within a specified time frame are identified and listed.
Top five users by blocked connection or session.

The top five users with the highest number of blocked connections or sessions, are listed.
Top five users by bandwidth.

The top five users based on their bandwidth consumption, starting from the highest consumer and going down are listed.
Top five users by data received.

The top five users based on incoming data are listed.
Top five users by data sent.

The top five users based on outgoing data are listed. Users are ranked by the amount of data they send, from highest to lowest.
Top five users by number of connections or sessions.

The top five users with the most connections or sessions in a total number of distinct connections or sessions a user has been part of are listed without considering their duration or bandwidth.
Top five applications accessed by users.

The top five applications that are ranked based on user access frequency are listed.
Top users by number of connection or sessions visiting unproductive websites.

The top target users who frequently visit unproductive sites are listed.
Top five active VPN users by duration.

The duration of the active sessions for users utilizing a VPN is listed.
Top five active VPN users

The top five users are connected via VPN, regardless of their session duration.

Top five active VPN users by bandwidth in the last 24 hours for a specific group.

SAMI lists all users within relative time frames (Last 1 Hour, Last 24 Hours, and Last 7 Days) and across different scopes (whole tenant, specific group, or specified firewall).