Bandwidth reports showing higher throughput when adding categorisation filters
search cancel

Bandwidth reports showing higher throughput when adding categorisation filters

book

Article ID: 377793

calendar_today

Updated On:

Products

Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Cloud SWG Admin running multiple reports from the Cloud SWG Portal page.

When Running the 'Bandwidth Used per Day' report, it reports the expected daily traffic in TB.

When adding a filter to this report via the custom setting so that it won't include traffic from certain categories (e.g. add category is NOT finance), the amount of traffic reported in GB/TB goes up rather than down as expected.

Looking at a specific example, we can see the discrepancy:

1. Total request for all traffic into Cloud SWG 

2. Total request for all traffic into Cloud SWG except for traffic categorised as finance - where count is much higher

Adding filters that are not specific to categories e.g. site, protocol results in correct byte volumes being reported.

 

Environment

Cloud SWG.

Reporting.

Cause

To generate this report, we sum the bandwidth from each category that is not Finance.  Because requests can have multiple categories, the total of those categories can double the count for some traffic.

Resolution

Broadcom Engineering is aware of issue and working on a solution - no ETA yet.

As a workaround, run the original query and then a second query for the category we want to exempt e.g. finance above. Then subtract the finance bandwidth from the total bandwidth to get the non finance details.