McAfee SG310 Administration Manual page 192

Firewall menu options
Connection tracking
You can view connection tracking details in the connection tracking report. For more information, see
the Connection Tracking
From the Firewall menu, click Connection Tracking. The Connection Tracking page appears with the
1
Configuration tab displayed
Figure 198 Connection Tracking page
Select the Enabled checkbox for the Modules you need to track. Clear the Enabled checkbox for the
2
modules you do not need to track. Disabling a module disallows any additional connections through the
firewall as a result of connection tracking. Available modules are:
• FTP
• H.323
• IRC
• PPTP
• TFTP
[Optional] Select the Enable Connection Logging checkbox to log connections to the system log as
3
they are established and expire; however, this can result in excessive log messages if you have a large
or busy network. Make sure you have enabled remote system logging if you enable connection logging.
See Enabling remote system
[Optional] By default, the a connection event is logged every time a connection starts. Uncheck the Log
4
Connection Start checkbox to disable this option.
[Optional] By default, the a connection event is logged every time a connection ends. Uncheck the Log
5
Connection End checkbox to disable this option.
[Optional] To enable flood rate limiting for new connections on Internet interfaces, select the Enable
6
Flood Rate Limiting checkbox. Attempts to initiate new connections that exceed the defined rate limit
are logged and dropped.
Note: Global flood rate limiting is disabled by default so that it doesn't interfere with certain legitimate
high-load situations. It is recommended that flood rate limiting be handled on a rule-by-rule basis. See
limiting a packet filter rule
192 McAfee UTM Firewall 4.0.4 Administration Guide
Report.
(Figure 198).
logging.
for more details.
About
Rate