Flow Review is your command center for network traffic classification. Filter by protocol, port, site, or status. Mark flows as allowed, blocked, or pending. Bulk actions make auditing thousands of flows fast.
Filter flows by protocol (TCP/UDP/ICMP), destination port, source site, destination site, and classification status.
Select multiple flows and apply allow/block/pending status in one click. Process thousands of flows quickly.
Real-time counts of total, allowed, blocked, and pending flows. Track classification progress at a glance.
Click any flow to see enriched endpoint details from SentinelOne and Active Directory.
Navigate through large datasets with smooth pagination. Configure page size for your workflow.
See which data source discovered each flow—Azure, SentinelOne, Dragos, or Tenable—with color-coded badges.
Narrow down flows by port, protocol, or site.
Examine flow details and enrichment data.
Mark as allowed, blocked, or pending.
Generate firewall rules from classifications.
When you click a flow, Lattice queries SentinelOne and Active Directory to resolve the IP to a real device with full context.
Open Flow Review and take control of your network traffic.
Back to Home →