The real-time Smoothwall Firewall report shows a list of the network traffic connections passing through the Smoothwall Firewall in real time. If there isn't an inbound and an outbound interface, the traffic has been directed to the Smoothwall Firewall, which means it was blocked by the Smoothwall Firewall. If there is an inbound and outbound interface, the Smoothwall Firewall has transferred the traffic out of another interface.
Use this page to view the network traffic connections currently passing through the Smoothwall Firewall. The amount of Firewall log data retained by the Smoothwall Firewall depends on the Datastore's log retention settings.
Procedure
On the REPORTS menu, under the Realtime submenu, click Firewall.
- To pause the real-time display, click Pause. To resume the real-time display, click Realtime.
- To view logs from further in the past, click the date, select when you want to view logs from and click Apply.
- To remove an applied filter, click the minus sign next to it.
- To filter by a column header, from the list, typically showing "Inbound interface" if a previous filter has not been applied, click the Inbound interface arrow and choose the relevant header to filter by. Next select the sub heading you want to filter by and click Apply filter.
- To remove an applied filter, click the minus sign next to it.
- To change the displayed columns, from the Show columns list, clear the selection for those columns you don't want to see.
- To add columns to the view, click Show columns and select the column to add.
- To export the Smoothwall Firewall logs, from the Smoothwall Firewall log viewer heading, click Export and follow your browser's instructions to save the results.csv file.
- To change the amount of data shown, from the Show # per page list, select the relevant value.
Details:
- Source IP: The IP address of where the connection originated from. If source NAT was applied to this log entry, the IP address shown here is before the source NAT rule was applied.
- Destination IP: The IP address, if any, of where the connection is routed to, taken from the packet header. If port forwarding was applied to this log entry, the IP address shown here is after the port forward rule was applied.