How to find source of Application

[sunmicroman]

I have been seeing an application listed on my daily report from Untangle under "Application Control" once in a while and would like to find out what it is and where it is originating from on our network. It is listed as OpenVPN, but no one is using that application and I think it is another application (maybe a remote connection tool) that is possibly being flagged as that app because it might use it. I logged into the Untangle server and looked under Application Control and wanted to see the reports, but there is no report tab listed to click on. How would I go about finding the source node and and IP address on my network? Thanks in advance.

[jcoffin]

Search the session report with a filter for that application. Application Control / Classified Sessions, filter the application column by the application name.

[gravenscroft]

How would I go about finding the source node and and IP address on my network?

In Reports, the term client always means 'the device that initiated this session' and the term server always means 'the device that received this session'. Ergo, the column 'Client Address' will show you the IP address of the device that started it.

[jcoehoorn]

I think it is another application (maybe a remote connection tool)

Many remote connection tools are actually just thinly disguised or rebranded OpenVPN behind the scenes.