Flow Anomaly Detection
alc monitors flow runs and detects any anomalies in a flow's behavior for any flow that experiences an anomaly an indicator is displayed for the flow in numerous places (see sample screenshots below) also, in the 'details' tab of the flow record under the security section you'll see anomaly frequency for the last 7 days anomalies are significant deviations from a flow's normal behavior and their cause could be inocuous (one time events due to resource challenges) or harmful (malicious activities) anomaly frequency for a flow anomaly indicator folder view for an environment anomaly indicator with details flow activity in flow record