Real-Time Monitor in multiple Policy Server deployments

Administrator Help | Forcepoint Web Security and Forcepoint URL Filtering | v8.5.x

When you go to the Reporting > Real-Time Monitor page, Real-Time Monitor shows information for the Policy Server instance to which the Forcepoint Security Manager is currently connected. This means that if you have multiple Policy Servers, when you connect the Security Manager to a new Policy Server instance, Real-Time Monitor starts to display information for a different set of clients.

If you want Real-Time Monitor to continue monitoring traffic for a specific Policy Server, regardless of which Policy Server instance the Security Manager is connected to, click Full Screen to open the monitor in a new window. The IP address of the monitored Policy Server is displayed at the top of the screen.

Real-Time Monitor receives Internet activity information from Usage Monitor. Each Policy Server must have a Usage Monitor instance associated with it for Real-Time Monitor to show its Internet activity.

You can have multiple Real-Time Monitor instances running in full-screen mode, each showing data for a different Policy Server:

Log on to the Forcepoint Security Manager and select the Web module. It connects to the central (default) Policy Server.

Go to the Reporting > Real-Time Monitor page and click Full Screen.

The IP address of the central Policy Server appears in the title bar.

Return to the Security Manager and use the Policy Server Connection button in the toolbar to connect to a different Policy Server instance.

Repeat step 2.

Repeat for each additional Policy Server instance in your network.

In full screen mode, Real-Time Monitor does not time out.