To configure a Network Traffic Analysis Dark Web (Tor) Usage threshold:

  1. Configure the following:
    • Name . Specify a name for the threshold. This name helps you identify the threshold in the Threshold library and displays as the report title on the Alert Center Home page.
    • Threshold . Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when more than 1 connection to the Dark Web has been made in the last 15 minutes. Please note, the list of connections to the Dark Web is updated weekly by default.
    • Traffic to monitor . Select the Network Traffic Analysis source or interface from which to monitor traffic.When you select a source , traffic for all interfaces on the source is monitored. When you select an interface , only traffic for the selected interface is monitored. By default, the threshold is set to monitor traffic from all Network Traffic Analysis sources.
      Note: Sources sending sampled data are not displayed as a selection option in the Traffic to monitor list because Network Traffic Analysis cannot determine that traffic has failed on sampled data.
    • Hosts to monitor . Click Select to choose the hosts to which the threshold applies. By default, the threshold monitors all applicable hosts.
    • Notification . Select the notification policy to apply to this threshold. This policy begins sending notifications when an item is outside the configured threshold limits. If you do not see an appropriate threshold policy, or if the list is empty, click browse ( ... ) to open the Notification Policy dialog and configure a new policy.
      Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.
    • Threshold check . Enter a time interval for Alert Center to check the WhatsUp Gold database for items that are out of the threshold parameters.
  2. Automatically resolve items no longer out of threshold . Select this option if you want Alert Center to automatically resolve items when they return to the value within the threshold limit..
    Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check. Avoid setting the threshold check interval to a very short time, as this can degrade system performance. In general, setting the threshold check interval to less than five minutes is not advised.
  3. Click OK to save the threshold settings.