How to alert for high traffic utilization?

Ransomware has a habit of copying large amounts of data out to the WAN. How can I monitor/alert on the WAN interface when there is high, sustained traffic utilization that might indicate large amounts of data are leaving the LAN going to the Internet?
Category: Firewall Management and Analytics
0