Web User Interface for Wanguard

Console is an OS-independent, web-based application that provides centralized management and reporting for all Wanguard and Wansight components. It aggregates and correlates data from distributed Flow Sensors, Packet Sensors, and Filters, offering a unified operational view of traffic monitoring and network security.

The interface is tightly integrated, highly graphical, and fully interactive, enabling efficient navigation across all monitoring, analysis, and configuration functions. Its graph rendering engine draws every graph and chart directly in the browser, supporting click-to-zoom, animations and rich tooltips, so operators can quickly investigate anomalies, assess network behavior, and validate mitigation actions.

• Provides consolidated, real-time management and monitoring for Sensors and Filters, installed on the same server or distributed across the network
• Its rich, dynamic user interface is accessible from major web browsers that run on desktops or mobile devices. Supports HTTPS encryption
• An intuitive navigation allows drilling into the live monitoring results
• You can add any number of custom dashboards with over 40 highly-configurable widgets, arranged either in content-driven columns or freely on a 12-column grid layout. Widget title bars can be hidden. The predefined dashboards allow you to quickly start monitoring networks, services, servers and software components
• Permits role-based authenticated access for an unlimited number of users with fine-grained security profiles. Supports Managed Security Services Provider (MSSP) capabilities such as:
  • Customized web portal login page
  • Only traffic/alert information relevant to the client is visible
  • Users can change their passwords
  • Operators can create profiles within their scoped view
  • Users can view traffic reports for their scoped view and their configured profiles including application, protocol, top talkers reports, ongoing and recent anomalies, etc.
• Users can be authenticated locally, by Single Sign-On with SAML 2.0, or remotely by cascaded LDAP, Active Directory or RADIUS servers. Built-in LDAP and RADIUS testers validate the configuration before it is saved. Allows having perpetual sessions with cookie-based authentication
• Supports IP grouping for segmenting networks into departments, customers, data centers, server clusters, etc. Supports Device grouping to ease the management of very large networks
• Graphs are animated and generated on-the-fly for live reporting. Bandwidth histograms contain 95th percentile values for burstable billing
• Report grids accept SQL-style row filtering expressions written against the column names, with K/M/G suffixes for rates and counters, so you can narrow thousands of records to the ones that matter
• You can view reports from the last 5 seconds to the last ten years by selecting any custom time frame. Complex reports can be emailed automatically to interested parties at preconfigured intervals
• All reports can be emailed from Console or exported as PDF files for easy printing. Exports tabular data as Excel spreadsheets
• A dedicated Flow Collector interface allows easy navigation into flow records and provides compelling statistics and summaries
• A dedicated Packet Tracer interface allows you to capture packets using just a few clicks and then view packet dumps in detail in a Wireshark-like web interface. Displays packet captures in raw hexadecimal data and ASCII data for inclusion in regular expressions
• A dedicated BGP Operations interface allows you to send BGP/Flowspec prefix updates for remotely-triggered BGP blackholes. Bgpd can be managed directly from the web interface
• Monitors the status of each appliance, including vital information about processed traffic, CPU, RAM and NIC usage. Sends alerts on errors and overload conditions (e.g. process error, CPU load, high memory consumption, used disk space over 95%, etc.)
• The interface supports white-labeling and custom branding
• Users can choose between 10 UI themes including a Dark Mode, and 2 icon sets
• Console bookmarks let you save frequently used, manually-entered data to be reused at a later time. A "Quick Search" button permits direct access to relevant reports
• Integrated web-based tools that provide:
  • IP information (reverse DNS, domain URL, IP range, AS, ISP, country, ping, traceroute, whois)
  • Lists of autonomous systems, TCP and UDP ports, IP protocols
  • IPv4/IPv6 Subnet calculator
  • World Clock
• The recorded data are stored in an internal SQL database that can be queried and referenced and is easy to backup and restore. Graph and profiling data can additionally be stored in ClickHouse, which avoids the cardinality-related scaling issues of InfluxDB. Storing flows in ClickHouse enables the interactive Flow Graphs: Stacked Areas, Stacked 100%, Lines, Grid, Sankey and Heatmap, grouped by most dimensions found in flow data
• Manipulate IP Zones and Sensors from the command line interface or custom scripts, or drive the whole configuration through the REST API
• Provides contextual documentation in the GUI to help users understand the functions in each screen; includes a configuration wizard

* Other Linux distributions should work but have not been tested yet.

The Console server stores the database and centralizes all operational logs, graphs and IP accounting data.

Console does not have a limit on the number of managed components. The performance of Console is determined by its settings, as well as the performance of the server and the performance of the applications it relies on: MySQL/MariaDB, Apache HTTPD, PHP, ClickHouse and InfluxDB.

To access the web interface provided by Console, use one of the following web browsers: Google Chrome 64 or later, Firefox 52 or later, Microsoft Edge 12 or later, or Opera 43 or later. JavaScript and cookies must be enabled. Java and Adobe Flash are not required. For the best experience, use Google Chrome and a 1280x1024 or higher resolution display.

You can download and try Console for 30 days by requesting an evaluation license.

Frequently asked questions are answered in the User Guide and Knowledge Base.

If you need any further information, do not hesitate to contact us.