View connections, blacklists, VPN SAs, users, routing, SSL VPNs, and neighbors
There are several views in which you can monitor the status of the system.
The Blacklist view does not show whether connections matching the entries are blocked by the Firewall, Layer 2 Firewall, or IPS engine. Blacklist entries are added and removed according to their duration. The Blacklist view does not show any history of entries that have already expired. Use the Logs view to see information about actual connections that are allowed and denied. Depending on the logging options selected in the policy, you can also use the Logs view to see past blacklist entry creation.
For more details about the product and how to configure features, click Help or press F1.
Steps
Connections view
Use this view to monitor connections.
Option | Definition |
---|---|
Toolbar | |
Save Column Settings | Saves the current column selection. |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Statistics menu | Shows the monitored data as charts. Select one of the predefined statistical items or select Select to create a custom statistical item. |
Tools menu | |
Columns |
|
Text Size | Increases or decreases the text size. |
Time Zones | Allows you to select the time zone for viewing entries. |
Show Milliseconds | When selected, the time stamp of entries includes milliseconds. |
Use Color Filters | When selected, entries are shown using color filters. |
Show Icons | When selected, element icons are shown in entries. |
Resolve Addresses by DNS | When selected, IP addresses in entries are resolved using DNS. |
Resolve Addresses by Elements | When selected, element names are shown instead of IP addresses. |
Resolve Senders | When selected, the name of the NGFW Engine is shown in the Sender column instead of the IP address of the NGFW Engine. |
Option | Definition |
---|---|
Connections table — Several menu options are available when you select a log entry and right-click. | |
Show Referenced Events | View more information about related log events. |
New Blacklist Entry | Opens the Blacklist Entry Properties dialog box, where you can blacklist a connection manually. |
Terminate | Terminates a connection in the Connections view. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
Blacklist view
Use this view to monitor current blacklist entries.
Option | Definition |
---|---|
Toolbar | |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Tools menu | |
Columns |
|
Option | Definition |
---|---|
Blacklist entries table — Several menu options are available when you select an entry and right-click. | |
Show Referenced Events | View more information about related log events. |
Remove Entry | Remove a blacklist entry in the Blacklist view. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
VPN SAs view
Use this view to monitor active VPN SAs.
Option | Definition |
---|---|
Toolbar | |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Tools menu | |
Columns |
|
Option | Definition |
---|---|
VPN SAs table — A menu option is available when you select an entry and right-click. | |
Delete | Forces an SA to renegotiate. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
SSL VPNs view
Use this view to monitor SSL VPNs.
Option | Definition |
---|---|
Toolbar | |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Tools menu | |
Columns |
|
Option | Definition |
---|---|
SSL VPN table — There is a menu option available when you select an entry and right-click. | |
Terminate | Terminates the SSL VPN session. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
Users view
Use this view to monitor active users.
Option | Definition |
---|---|
Toolbar | |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Tools menu | |
Columns |
|
Option | Definition |
---|---|
Users table — A menu option is available when you select an entry and right-click. | |
Delete | Closes the end user’s session. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
Routing view
Use this view to monitor the routing of a selected engine.
Option | Definition |
---|---|
Toolbar | |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Tools menu | |
Visualization | Opens the Visualization tab. |
Columns |
|
Option | Definition |
---|---|
Routing table | Shows the routing entries for the selected engine. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |
Neighbor monitoring view
Use this dialog view to monitor information that the NGFW Engine has received about devices in directly connected networks.
Option | Definition |
---|---|
Toolbar | |
Save Column Settings | Saves the current column selection. |
Play | Shows current entries. |
Pause | Creates a temporary snapshot of entries. |
Stop | Aborts the running query. |
Save | Saves a snapshot of entries. |
Statistics menu | Shows the monitored data as charts. Select one of the predefined statistical items or select Select to create a custom statistical item. |
Tools menu | |
Columns |
|
Text Size | Increases or decreases the text size. |
Time Zones | Allows you to select the time zone for viewing entries. |
Show Milliseconds | When selected, the time stamp of entries includes milliseconds. |
Use Color Filters | When selected, entries are shown using color filters. |
Show Icons | When selected, element icons are shown in entries. |
Resolve Addresses by DNS | When selected, IP addresses in entries are resolved using DNS. |
Resolve Addresses by Elements | When selected, element names are shown instead of IP addresses. |
Resolve Senders | When selected, the name of the NGFW Engine is shown in the Sender column instead of the IP address of the NGFW Engine. |
Option | Definition |
---|---|
Neighbors table | |
Protocol | Shows the protocol of the neighbor monitoring packet. |
Interface | Shows the interface on the NGFW Engine through which the neighbor monitoring packet was received. |
L3 Data | Shows the following information depending on the protocol of the
neighbor monitoring packet:
|
L2 Data | Shows the following information depending on the protocol of the
neighbor monitoring packet:
|
State | Indicates whether the information is up-to-date or whether the neighbor is reachable. |
Information Message (LLDP only) |
Shows the LLDP data as text if it is available. |
Option | Definition |
---|---|
Query pane | |
Filter tab | |
New |
|
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element. |
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison. |
Compare with | Select to compare snapshots. |
Second field | Shows the second snapshot selected for comparison. |
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison. |
Apply | Applies your changes. |
Option | Definition |
---|---|
Fields pane | |
Category drop-down list |
|
Field | The name of the field. |
Value | The value in the field. |