We have a known business process in place on our network for which I would love to be able to create a custom DPI category in order to more easily understand where the 18GB of download traffic is being used instead of just having the big 'unknown' then having to look up the asset, associate it to it's location / user and then go and bother the developer who is running the process.
I am not a programmer so I am not sure if this would be possible but I believe that we could determine that this is the process being run based on the IP address that is being accessed. I we can categorize based on an IP I think it would be similar to some others who would want this feature for the purpose of blocking by IP.
UBNT-cmb
on:
Fail-over WAN log