Tour of the NSX Intelligence Home Page

You access the NSX Intelligence home page by clicking Plan & Troubleshoot > Discover & Take Action in the NSX Manager user interface.

After you install and configure NSX Intelligence for the first time, when you click Plan & Troubleshoot > Discover & Take Action, NSX Intelligence begins to render some visualization after some network traffic data has been received from the transport nodes and the inventory information is received from NSX Manager.

By default, when you click Discover & Take Action, you see the visualization of the security posture of all the groups defined in your on-premises NSX-T Data Center inventory.

• If there are no groups defined yet, there are no groups displayed.
• Groups might have had allowed, blocked, and unprotected traffic flows between their compute member entities in the last one hour.
• If there are VMs or physical servers, but they do not belong to any group, you see the icon for the Uncategorized Computes group.
• If there are IP addresses that do not belong to any group, you see the Unknown icon.

Both of icons for the Unknown and Uncategorized Computes groups are shown in the following image.

If you already have defined groups and captured network traffic data, you might see a visualization similar to the following screenshot. The table that follows describe the numbered sections in the screenshot.

Section	Description
1	The Security view selection area is where you select the type of security visualization to display. There are two types of Security views available: Groups and Computes. When you click Discover & Take Action, the default Security view displayed is the Groups view of all the group objects in your NSX-T Data Center environment. To select specific groups in Groups view, click the down arrow next to ALL, select from the drop-down menu of available groups, and click Apply. To select the Computes view, click the down arrow next to Groups, select Computes, and click Apply. All the VMs, IP addresses, and physical servers that exist in your NSX-T Data Center environment are visualized. To select specific VMs, IP addresses, or physical servers to include in the Computes view, click the down arrow next to ALL, click Show All Types, and select a compute type (VMs, IPs, or Physical Servers) from the drop-down menu. Alternatively, select or deselect specific compute items from the drop-down menu, and click Apply. To clear your specific selections in either view types, click CLEAR in the upper-right side of the visualization page and confirm by clicking CLEAR in the Clear All Filters dialog box. If you click CLEAR when you are in the Computes view, the selection filters are cleared and you are placed in the Groups view. See Working with the Groups View and Working with the Computes View for more information on how to work with the two view types.
2	In the Apply Filter section, you can refine the criteria used for the current visualization. Click Apply Filter, select a filter criteria, and click Apply. You can specify multiple filters by clicking Apply Filter again.
3	With the Flows section, you can select which traffic flow type to include in the visualization for the selected time period. The colors used in the visualization for the flow types are also shown in this section. Red-hued dashed line for Unprotected flows Blue-hued solid line for Blocked flows Green-hued solid line for the Allowed flows By default, all the traffic flow types are selected for the current NSX Intelligence visualization. See Working with Traffic Flows for more information.
4	The Refresh Status section gives information as to when the visualization graph was last refreshed. To force a refresh of the current view, click the refresh icon.
5	When you click the gear icon, the Private IP CIDR Settings for NSX Intelligence dialog box is displayed. To enter the IPv4 or IPv6 IP CIDR notation using the format shown, enter the values in the corresponding box, press Enter for each entry, and click Save when finished. NSX Intelligence categorizes an IP address belonging to one of the CIDR notations listed in the dialog box as a private IP address. Any IP address that does not belong to any of these CIDR notations is classified as a public IP address. If the IP address of your VM or physical server does not fall into one of these CIDR notations, consider adding your CIDR notation using this dialog box.
6	In this section, you select the time period to use to determine which network flow data is used to generate the desired visualization and recommendation. Your selection determines the historical data that is used in the Groups view or Computes view. The time period is relative to the current time and some time period in the past. The Last 1 Hour is the default time period used. To change the selected time period, click the currently selected time period and select another from the drop-down menu. You can select Last 1 hr, Last 12 hrs, Last 24 hrs, Last 1 week, or Last 1 month.
7	This canvas section displays the visualization graph of the security postures of the groups or compute entities in your on-premises NSX-T Data Center environment. It also includes the visualization of the traffic flows that have occurred during the selected time period. In this section, you can point to a specific node or flow arrow to obtain details about that specific entity. See Getting Familiar with NSX Intelligence Graphic Elements and Understanding NSX Intelligence Views and Flows for more information.
8	This mini-map provides an overview map of the whole visualization graph. When you zoom into specific entities shown in the graph, the mini-map is updated to show where your current view is located relative to the overall graph. When you click in the mini-map window and drag the opaque rectangular overlay, your current view of the visualization graph is also updated.
9	Use these viewing control buttons to zoom in, zoom out, apply 1:1 aspect ratio, resize-to-fit the view, and go into or out of full-screen viewing mode. You can also use keyboard hotkeys to manage your viewing controls. To display the Keyboard Shortcuts Help window, press Shift+/. To navigate to a previously viewed visualization, use your Web browser's back button. When you are in full-screen mode, press ESC to exit the full-screen mode and use your Web browser's back button.