Network Activity Recording

Network activity recording allows you to see which applications are connecting to the Internet, when and where the connections are made, the IP ports they use, and the amount of network bandwidth consumed by those connections. A network "event" starts when a user (or any application on the computer) connects using TCP, FTP, HTTP, HTTPS, or KAZAA to an outside address and port. The event continues until the connection is ended or until a period of inactivity at the port passes (10 minutes by default).

Network Activity recording reveals:

Which users are accessing streaming audio / video, online gaming, and other non-work-related resource "hogs."
The extent of a productivity or resource drain: when connections are being made, which ports are used, and the amount of bandwidth consumed by those connections.
Violations of company acceptable use policy regarding media and downloads.
Which applications are making unnecessary or suspicious connections to the Internet.
Transactions made on the Internet that might not have been captured by Files Transferred, Program Activity, or Web Sites Visited recordings.

What Is Recorded

For each network event, the Client records:

Name of the program that established the network connection

Start and end time of event

Protocol used for connection

Domain name where connections were made

IP address of the target connection

Port used for the connection

Number of connections during the event

Number of bytes sent during the event

Number of bytes received during the event

Duration of the event

Connections Not Recorded

The Client will NOT record connections:

To the local computer's network IP address. Network connections made from the local Client computer to itself will NEVER be recorded. These standard ports include:
0.*.*.*:*
127.*.*.*:*.

To common network IP addresses in the ranges normally used for local networks. You can change settings to include these ports, but you risk receiving a very large number of network events. The standard LAN ports include:
10.*.*.*:*
169.254.*.*:*
192.168.*.*:*