Product name Name of the application.
Family Application family (e.g. Web client).
Details Full name of the application including its version number.
"Services" view
This tab describes the services detected on the host on which the selected user is connected.
The "Services" view displays the following data:
Port Indicates the port and protocol used by the service (e.g. 80/tcp).
Service name Indicates the name of the service (e.g.: lighthttpd)
Service Indicates the name of the service including its version number (e.g. lighthhtpd_1.4.28).
Details Additional information about the service detected.
Family Service family (e.g. Web server).
"Information" view
This tab describes the information relating to the host on which the selected user is connected.
The "Information" view displays the following data:
ID Unique identifier of the software program or operating system detected.
Name Name of the software program or operating system detected.
Family Family to which the detected software belongs (e.g. Operating System).
Level The alarm level associated with the discovery of this program.
Assigned Date and time the program or operating system was detected.
Details Name and version of the software program or operating system detected (e.g.
Microsoft_Windows_Seven_SP1).
Connection monitoring
"Real time" tab
This view shows all connections detected by the firewall. Every row represents a connection. The
"Connections" view displays the following data:
Date Indicates the date and time of the object's connection.
Connection Connection ID
Parent connection Certain protocols may generate "child" connections (e.g. FTP) and in this case, this
column will list the parent connection ID.
Protocol Communication protocol used for the connection.
User User logged on to the host (if any).
Source IP address of the host at the source of the connection
Source name Name of the object (if any) corresponding to the source host.
Source MAC address MAC address of the object at the source of the connection
Source port Number of the source port used for the connection
Source Port Name Name of the object corresponding to the source port
Destination IP address of the host to which the connection was set up.
Destination Name Name of the object (if any) to which the connection was set up.
Destination Port Number of the destination port used for the connection
Dest. Port Name Name of the object corresponding to the destination port
Source interf. Name of the interface on the firewall on which the connection was set up.
Dest. interf. Name of the destination interface used by the connection on the firewall.
Page 236/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
MONITORING
To Next Page
Loading...
