Administrator Specifies whether the user has administration privileges on the firewall.
Sponsor Whenever the user logs on via the Sponsorship method, this column will indicate the
name of the person who had validated he connection request.
Possible actions
Several search criteria can be combined. All of these criteria have to be met in order to be
displayed, as the search criteria are cumulative.
This combination of search criteria can then be saved as a “filter”. Filters will then be saved in
memory and can be reinitialized in the Preferences module of the administration interface.
(Filter drop-down
menu)
Select a filter to launch the corresponding search. The list will suggest filters that have
been saved previously and for certain Views, predefined filters. Selecting the entry
(New filter) allows reinitializing the filter by selecting the criteria selection.
Save Save as a customized filter the criteria defined in the Filter panel described in the next
section. You can save a new filter using the button "Save as" based on an existing
filter or a predefined filter offered in certain Views. Once a filter has been saved, it will
be automatically offered in the list of filters.
Delete Delete a customized filter saved earlier.
Modify
Click on this button to modify the filter being used and to edit criteria. For the "users"
view, the criteria are the following:
l By address range or IP address (grayed out if a host has been selected in the
"hosts" view).
l By source interface
l By directory (allows refining the filter when several LDAP directories have been
defined on the firewall)
l By authentication method
Reset This button cancels the action of the filter currently in use. If it is a saved customized
filter, this action will not delete the filter.
Export results
This button makes it possible to download a file in CSV containing information from the
table. Once a filter is applied, all results matching this filter will be exported.
Refresh This button refreshes data shown on the screen.
Reset columns This button makes it possible to display only columns suggested by default when the
host monitoring window is opened.
"FILTER" panel
You can add a criterion by dragging and dropping the value from the results field into the panel.
The Export results button allows downloading a file in CSV format containing all of this
information.
The Reinit. columns button makes it possible to display only columns suggested by default
when the host monitoring window is opened.
"Connections" view
This view shows all connections detected by the firewall for a selected user. Every row represents
a connection. The "Connections" view displays the following data:
Date Indicates the date and time of the object's connection.
Connection Connection ID
Parent connection Certain protocols may generate "child" connections (e.g. FTP) and in this case, this
column will list the parent connection ID.
Protocol Communication protocol used for the connection.
Page 233/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
MONITORING
To Next Page
