As I understand, the Throughput graph shows the current network throughput on the gateway in stead of applicative throughput. Moreover, "Gateway throughput" system events are also triggered based on this value. When I checked it from gateway's /proc/hades/status file, total throughput value matches with the graph but not applicative throughput.
I think, this issue (both graph and system event) is causing misunderstanding about license usage (license exceed, audit loss, etc.) and it should be changed.
#AllImperva------------------------------
cezmi çal
technical expert
Barikat Cyber Security
------------------------------