Connections; Proxy Filter Connections; Packet Filter Connections - Watchguard Firebox X15 User Manual

Configuration Pages Overview

Connections

This status page shows all TCP/IP connections that go through the Edge. It is divided between proxy filters and
packet filters. The packet filter list is sorted by protocol, with TCP protocols at the top of the list, then UDP
connections, then other IP protocols. In TCP/UDP protocols, it is sorted by timeout values.

Proxy filter connections

Type
HTTP, HTTPS, FTP, SMTP, POP3, SIP, or H323
Source: Port
IP address of the computer that sent the packet and the port used to send the packet.
Destination: Port
IP address the packet is being sent to, and the port.
Example Actions
o POP3 shows "n/a"
o HTTP shows the type of request, such as GET or POST. It also shows a hyperlink to the
destination web page.
o FTP shows the last FTP command the user issued, such as LIST, CWD, or GET

Packet filter connections

Protocol
Protocol that the connections uses.
Dir
Direction of the connection: incoming or outgoing.
Source: Port
Source IP address and port. A green arrow shows the direction of the connection.
Destination: Port
Destination IP address and port.
State
State of the connection. For TCP it is:
o TIME_WAIT - waiting for the TCP socket to close
o CLOSE - closing the socket
o ESTABLISHED - active connection
o SYN_SENT - establishing connection
UDP is a stateless protocol. For UDP, the connection shows as:
o REPLIED - there have been packets sent in both directions
o UNREPLIED - packets have been sent in only one direction
Other protocols are shown as "n/a".
Expires in (secs)
Number of seconds before the connection times out unless traffic is sent on the connection to restart
the timer.
34 Firebox X Edge e-Series