Viewing The Connection Tracking Report In The Console - McAfee SG310 Administration Manual

Firewall menu options
Connection tracking
The View Details button displays the report directly within the Connection Tracking Report page, at the
top of the page. If you are viewing the report within the console, you can limit the number of rows you want
to view within a report by entering a value in the Maximum display rows field.
You can also opt to download the report to a text file with the Download Details button. If you download
a report, all data is downloaded since the maximum rows value is ignored and there are no limitations
applied to the number of rows.
Fields applicable to TCP or UDP protocol only
The following fields are only applicable for connections using TCP or UDP protocol:
• Src port – Source Port
• Dest Port – Destination Port
• Reply Src Port – Reply Source Port
• Reply Dest Port – Reply Destination Port
Available filter types
The following table lists the types of filters that can be used for each field.
Table 15 Connection tracking report filters
Fields
Protocol
TCP State
Source IP
Destination IP
Source Port
Destination Port
Reply Source IP
Reply Destination IP
Reply Source Port
Reply Destination Port
Routing Interface

Viewing the connection tracking report in the console

Use this procedure to view the report directly within the Management Console.
Click Connection Tracking > Report tab. The Connection Tracking Report page is displayed
1
(Figure 199).
Select the Display checkbox for the fields you want to include in the report.
2
[Optional] If available for a field, enter any additional filter criteria in the Filter field.
3
[Optional] Select a column you want to sort from the Sort by list. The list contains all of the fields in the
4
report.
Enter the maximum number of rows you want displayed in the Maximum display rows field. This value
5
cannot exceed the display-only value shown in the System processing limit field. The system limit
value is dynamic depending on your current selections.
Default: 20
Click View Details. An action successful message is displayed. You can click the Displaying current
6
connection details here link to jump to the bottom of the page where the results are displayed, or use
the scroll bars.
194 McAfee UTM Firewall 4.0.4 Administration Guide
Filter Type
Case-sensitive string
Case-sensitive string
Case-sensitive string
Case-sensitive string
Numeric match
Numeric match
Case-sensitive string
Case-sensitive string
Numeric match
Numeric match
Case-sensitive string