Stormshield SN series - Page 237

Sent Number of bytes sent during the connection.
Received Number of bytes received during the connection.
Duration Connection time.
Last used Time elapsed since the last packet exchange for this connection.
Router ID assigned by the firewall to the router used by the connection
Router name Name of the router saved in the objects database used by the connection
Rule type Indicates whether it is a local, global or implicit rule.
Rule ID name of the rule that allowed the connection
Status This parameter indicates the status of the configuration corresponding, for example, to
its initiation, establishment or closure.
Queue name Name of the QoS queue used by the connection.
Possible actions
Several search criteria can be combined. All of these criteria have to be met in order to be
displayed, as the search criteria are cumulative.
This combination of search criteria can then be saved as a “filter”. Filters will then be saved in
memory and can be reinitialized in the Preferences module of the administration interface.
(Filter drop-down
menu)
Select a filter to launch the corresponding search. The list will suggest filters that have
been saved previously and for certain Views, predefined filters. Selecting the entry
(New filter) allows reinitializing the filter by selecting the criteria selection.
Save Save as a customized filter the criteria defined in the Filter panel described in the next
section. You can save a new filter using the button "Save as" based on an existing
filter or a predefined filter offered in certain Views. Once a filter has been saved, it will
be automatically offered in the list of filters.
Delete Delete a customized filter saved earlier.
Modify
Click on this button to modify the filter being used and to edit criteria. For the
"connections" view, the criteria are the following:
l By address range or by IP address
l By source interface
l By destination interface
l By destination port
l By protocol
l By user
l For a value of exchanged data higher than the value specified with the cursor.
l According to the last use of the connection (only saved connections with a last
used value lower than the specified value will be displayed).
l By rule name
If the See all connections (closed or reinitialized connections, etc.) checkbox has
been selected, all connections will be displayed in the table, regardless of their
status.
Reset This button cancels the action of the filter currently in use. If it is a saved customized
filter, this action will not delete the filter.
Refresh This button refreshes data shown on the screen.
Export results
This button makes it possible to download a file in CSV containing information from the
table. Once a filter is applied, all results matching this filter will be exported.
Reset columns This button makes it possible to display only columns suggested by default when the
host monitoring window is opened.
Page 237/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
MONITORING