The report you mention is the way to do it, but you are correct. An end host must have been connected to that port at one time. This is the only way to achieve a baseline of when the port was last used, so a correct amount of idle time can be given.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
