Network Traffic Analysis-Dark Web (Tor) Threshold

From the WhatsUp Gold navigation menu:

1. Select the Settings tab, select Alerts and Actions and choose Alert Center.

   Alert Center Libraries view displays.

2. Click the Network Traffic Analysis-Dark Web (Tor) Threshold panel (if collapsed).

   The Network Traffic Analysis-Dark Web (Tor) Threshold displays.

3. On the Network Traffic Analysis-Dark Web (Tor) Threshold panel, click "add" ().

   The Select Network Traffic Analysis-Dark Web (Tor) Threshold Type dialog displays.

4. Choose Network Traffic Analysis-Dark Web (Tor) Threshold and click OK.

   The Configure Threshold Alert dialog displays.

5. Edit the Network Traffic Analysis-Dark Web (Tor) Threshold configuration.

To configure a Network Traffic Analysis Dark Web (Tor) Usage threshold:

1. Configure the following:
   • Name. Specify a name for the threshold. This name helps you identify the threshold in the Threshold library and displays as the report title on the Alert Center Home page.
   • Threshold. Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when more than 1 connection to the Dark Web has been made in the last 15 minutes. Please note, the list of connections to the Dark Web is updated weekly by default.
   • Traffic to monitor. Select the Network Traffic Analysis source or interface from which to monitor traffic.
     When you select a source, traffic for all interfaces on the source is monitored. When you select an interface, only traffic for the selected interface is monitored.
     By default, the threshold is set to monitor traffic from all Network Traffic Analysis sources.

   Note: Sources sending sampled data are not displayed as a selection option in the Traffic to monitor list because Network Traffic Analysis cannot determine that traffic has failed on sampled data.

   • Hosts to monitor. Click Select to choose the hosts to which the threshold applies. By default, the threshold monitors all applicable hosts.
   • Notification. Select the notification policy to apply to this threshold. This policy begins sending notifications when an item is outside the configured threshold limits. If you do not see an appropriate threshold policy, or if the list is empty, click browse (...) to open the Notification Policy dialog and configure a new policy.

   Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.

   • Threshold check. Enter a time interval for Alert Center to check the Network Performance Monitor database for items that are out of the threshold parameters.
   • Select Automatically resolve items no longer out of threshold to have Alert Center automatically resolve items when they return to the parameters inside the threshold.

   Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.
   
   Avoid setting the threshold check interval to a very short time, as this can degrade system performance. In general, setting the threshold check interval to less than five minutes is not advised.

2. Click OK to save the threshold settings.

Clone a threshold based on a custom or built-in configuration:

1. Click on a threshold on the Thresholds Library panel you want to copy.
2. Click the Copy button, and click OK to create a new Network Traffic Analysis-Dark Web (Tor) Threshold.

   The Edit Network Traffic Analysis-Dark Web (Tor) Threshold dialog displays.

3. Save or customize your new threshold, either:
   • Type in a new value for Name field (or keep the default) and click OK to save to the Thresholds Library.
   • Follow the Edit Network Traffic Analysis-Dark Web (Tor) Threshold instructions.

Delete an existing Network Traffic Analysis-Dark Web (Tor) Threshold:

1. Select Network Traffic Analysis-Dark Web (Tor) Threshold you want to delete from the Network Traffic Analysis-Dark Web (Tor) Threshold panel.
2. Click the Delete button, and then click Yes to confirm the deletion.

   The Network Traffic Analysis-Dark Web (Tor) Threshold configuration is deleted.