Capacity and traffic insights

Capacity and traffic insights are analytical capabilities that

  • provide visibility into resource utilization across devices and highlight emerging risks

  • predict when risks may lead to performance issues by combining historical trends with predictive insights

  • enable proactive capacity planning by identifying future risks before they impact system performance, and

  • anticipate problems and support action before they affect users.

How AgenticOps generates capacity insights

Forecasted insights predict future resource utilization based on historical trends and patterns. AgenticOps continuously analyzes historical data and runs periodic forecasts to identify when resources are likely to reach configured thresholds.

AgenticOps uses multiple analytical approaches to identify and predict issues. AgenticOps runs forecasts on a recurring weekly basis to identify potential capacity risks in advance, including:

  • Detect threshold breaches: Identifies when CPU or memory usage exceeds configured limits in real time.

  • Detect anomalies: Identifies unusual deviations from expected behavior based on historical patterns.

  • Detect elephant flows: Detects large traffic flows that can impact system performance and resource utilization.

  • Detect Remote Access VPN session limits: Detects or predicts when VPN session capacity limits are reached.

  • Forecast capacity risks: Predicts future threshold breaches using historical trends, enabling proactive planning.

The image illustrates capacity and traffic insights, highlighting key features such as anomaly detection, elephant flow identification, VPN session limit monitoring, and capacity risk forecasting based on historical data trends.
Note

  • The accuracy of insights depends on the availability and quality of historical data. Limited or inconsistent data may delay or reduce insight accuracy.

  • In environments with limited activity or newly onboarded devices, insights and forecasts may take time to appear.

This table shows key features of Capacity and Trend Analyzer:

Key features of capacity and trend analyzer

Feature

Description

Capacity insights dashboard

Provides a fleet-level view of device capacity status, displaying past, current, and predicted capacity insights across all monitored devices.

Capacity insights

Generates insights based on CPU, memory, connection, throughput, and VPN session activity to highlight potential resource constraints.

Device capacity analysis

Displays detailed capacity insights for an individual device, including resource metrics, AI-generated summaries, and forecast information.

Predictive capacity forecasting

Uses historical resource utilization data to predict future usage trends and identify potential capacity risks before thresholds are reached.

Timeline-based analysis

Allows you to analyze capacity insights across different time windows, including past events, current conditions, and predicted future risks.

Device health indicators

Displays device health status based on active and predicted capacity insights, helping you quickly identify devices that require attention.

The Capacity and Trend Analyzer supports:

  • Secure Firewall Threat Defense devices

  • Secure Firewall Threat Defense High Availability (HA) deployments

  • Secure Firewall Threat Defense cluster deployments

Note

For High Availability (HA) and cluster deployments:

  • Capacity analysis runs at the system level.

  • Individual member devices are not displayed separately.