Downloading The Connection Tracking Report; Example: Creating A Connection Tracking Report; Intrusion Detection Systems - McAfee SG310 Administration Manual

Firewall menu options

Intrusion Detection Systems

Downloading the connection tracking report

Use this procedure to download the connection tracking report rather than viewing it directly within the
console. The download creates a tab-delimited file you can either view in an associated text editor such as
Notepad, or save for importing into a spreadsheet application such as Excel for further sorting.
When you download report details, all matching details are output to the report. The Sort By and Maximum
Rows values are ignored.
Click Connection Tracking > Report tab. The Connection Tracking Report page is displayed.
1
Select the Display checkbox for the fields you want to include in the report.
2
[Optional] If available for a field, enter any additional filter criteria in the Filter field.
3
[Optional] Select a column you want to sort from the Sort By list. The Sort By list contains all of the fields
4
in the report. Default: No sorting.
Enter the maximum number of rows you want displayed in the Maximum display rows field. This value
5
cannot exceed the
display-only value shown in the System processing limit field. The system limit value is dynamic
depending on your current selections.
Default: 20
Click Download Details. The File Download dialog box is displayed.
6
Click Open to view the text file directly, or click Save to save the file. The default filename contains the
7
date and current time of the report.

Example: Creating a connection tracking report

This example creates a connection tracking report that focuses on source and destination IP addresses and
their associated routing interface.
Click Connection Tracking > Report tab. The Connection Tracking Report page is displayed.
1
Select the Display checkboxes for the Src IP, Dest IP, and Routing Interface fields. Clear all other
2
checkboxes.
Click View Details. The report is displayed in the lower half of the page
3
source IP addresses currently connected. The current date and time is given, along with connections
matching your selection criteria.
Figure 200 Current Connection Details
Intrusion Detection Systems
The UTM Firewall appliance provides two IDS (Intrusion Detection Systems):
McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 200). You can see the
195