ZyXEL Communications ZyWall 110 User Manual page 208

The following table describes the labels in this screen.
Table 41 Monitor > System Status > Session Monitor
LABEL DESCRIPTION
View Select how you want the established sessions that passed through the Zyxel Device to be
displayed. Choices are:
• sessions by users - display all active sessions grouped by user
• sessions by services - display all active sessions grouped by service or protocol
• sessions by source IP - display all active sessions grouped by source IP address
• session by source region - display all active sessions grouped by where the traffic is coming
from by country
• sessions by destination IP - display all active sessions grouped by destination IP address
• sessions by destination region - display all active sessions grouped by where the traffic is
going to by country
• all sessions - filter the active sessions by the User, Service, Source Address, and Destination
Address, and display each session individually (sorted by user).
Refresh Click this button to update the information on the screen. The screen also refreshes
automatically when you open and close the screen.
The User, Service, Source Address, Destination Address, Source Country and Destination
Country fields display if you view all sessions. Select your desired filter criteria and click the
Refresh button to filter the list of sessions.
User This field displays when View is set to all sessions. Type the user whose sessions you want to view.
It is not possible to type part of the user name or use wildcards in this field; you must enter the
whole user name.
Service This field displays when View is set to all sessions. Select the service or service group whose
sessions you want to view. The Zyxel Device identifies the service by comparing the protocol
and destination port of each packet to the protocol and port of each services that is defined.
Source This field displays when View is set to all sessions. Type the source IP address whose sessions you
Address
want to view. You cannot include the source port.
Source This field displays when View is set to all sessions. Select the country where the traffic is coming
Country
from.
Destination This field displays when View is set to all sessions. Type the destination IP address whose sessions
Address
you want to view. You cannot include the destination port.
Destination This field displays when View is set to all sessions. Select the country where the traffic is going to.
Country
Search Click this to display all sessions in the table below according to the criteria you defined above.
Clear Administrators can use these buttons to forcibly terminate selected TCP/UDP connections.
Select one or multiple connections and then click Clear; click Clear All to terminate all
Clear All
connections displayed. Cleared sessions display in the Log > View Log screen.
# This field is the rank of each record. The names are sorted by the name of user in active session.
You can use the pull down menu on the right to choose sorting method.
User This field displays the user in each active session.
If you are looking at the sessions by users (or all sessions) report, click + or - to display or hide
details about a user's sessions.
Service This field displays the protocol used in each active session.
If you are looking at the sessions by services report, click + or - to display or hide details about
a protocol's sessions.
Source This field displays the source IP address and port in each active session.
If you are looking at the sessions by source IP report, click + or - to display or hide details about
a source IP address's sessions.
Source This field displays the source country in each active session.
Country
Chapter 7 Monitor
ZyWALL USG Series User's Guide
208