Alcatel-Lucent AOS-W 6.5.3.x - Firewall

827| Dashboard Monitoring AOS-W 6.5.3.x| User Guide
Firewall
The AOS-W Policy Enforcement Firewall (PEF) module provides identity-based controls to enforce application-
layer security and prioritization. With PEF, network administrators can enforce network access policies that
specify who may access the network, with which mobile devices, and which areas of the network they may
access. The Alcatel-Lucent AppRF technology integrated with PEF delivers mobile application traffic visibility
through a simple dashboard that shows the applications in use by user and device. It gives network
administrators insights on the applications that are running on their network, and the users using them.
The Firewall page on the Dashboard tab displays the PEF summary of all the sessions in the switch
aggregated by users, devices, destinations, applications, WLANs, and roles.
Firewall visibility is disabled on the switch by default. To enable this feature, use the following procedures:
In the WebUI
1. Navigate to the Dashboard > Firewall page.
2. Click the link on the Element View section to enable firewall visibility. To disable, click the Disable Firewall
link at the bottom of the Element View section.
In the CLI
Use the following command:
(host)(config) #firewall-visibility
To disable this setting, include the no parameter:
no firewall-visibility
Element View
Navigate to the Dashboard > Firewall page to view Element View section. This section displays a summary
of all the sessions in the switch and includes six categories of monitoring data, or elements, that display traffic
statistics aggregated by the following elements:
Element Description
User Indicates a wireless or wired user associated to the switch.
Traffic that is not generated by a user is aggregated as non-user traffic.
Devices Specifies the client device type.
for example: Windows 7, Mac OS X, iPhone, or Android.
Destinations Destination hostname, or IP address if the hostname is unavailable.
Common advertising and file sharing services on the Internet are cat-
egorized under special destinations called ad networks and file share
networks respectively.
Table 182: Element View