Cisco Multicloud Defense User Guide

PDF

Cisco Multicloud Defense User Guide

Flow Analytics

Updated: July 8, 2026

Learn how to use Flow Analytics in Multicloud Defense to understand network traffic across cloud environments.

    Flow Analytics - Traffic Summary

    Find details about active and closed proxy sessions in the Flow Analytics Traffic Summary, including endpoints, traffic volume, applications, policies, and connection status.

    Flow Analytics - All Events

    Find details about all network and security events in Flow Analytics, including session, application, policy, traffic, and threat information for investigation.

    Firewall Events

    Find details about firewall events in Flow Analytics, including connection endpoints, applications, actions, session states, HTTP requests, and matching security policy rules.

    Network Threats

    Find details about antivirus, data loss prevention, and intrusion events in Flow Analytics to investigate detected threats and affected network sessions.

    Web Attacks

    Find details about WAF and Layer 7 denial-of-service events in Flow Analytics to investigate security attacks against protected web applications.

    URL Filtering

    Find details about URL Filtering events in Flow Analytics, including requested URLs, categories, HTTP methods, actions, applications, and matching security policy rules.

    FQDN Filtering

    Find details about FQDN Filtering events in Flow Analytics, including domains, categories, reputation scores, actions, session data, and matching policy rules.

    HTTPS Logs

    Find details about HTTPS events in Flow Analytics, including TLS errors, connection endpoints, applications, certificate information, actions, and related policy rules.

    VPN Logs

    Find details about VPN connections in Flow Analytics, including activity, usage, errors, security events, gateway information, and downloadable event reports.

    EndUser Logs

    Find details about end-user application activity in Flow Analytics to review user sessions, application performance, connection endpoints, and potentially suspicious behavior.

    HTTP2 Logs

    Find details about HTTP/2 activity in Flow Analytics to analyze application behavior, connection performance, resource use, and data transmission issues.

    Investigate summary page

    Explains the concept of traffic summary and logs in diagnosing policy effectiveness and threats.