Connection list

This page provides a current or live connection snapshot of your device in list form. Apart from the connection details, the list also provides information like firewall rule ID, user ID, and connection ID per connection. It is possible to filter the connection list as per the requirement. Click the Connection ID hyperlink to view the live snapshot of a specific connection in a new window.

The administrator can set the refresh interval to automatically refresh the list at the configured time interval or manually refresh the list by clicking the Refresh button. To filter the connection list click the display filter and specify the parameters.

Connection list

Time: Connection establishment time in the format HH:MM:SS.
Connection ID: Unique ID assigned to a connection.
In interface: Port used for the incoming connection.
Out interface: Port used by the outgoing connection.
Source IP: Source IP address (IPV4/IPv6) of the connection.
Destination IP: Destination IP address (IPV4/IPv6) of the connection.
Protocol: Protocol used by the connection, like TCP or UDP.
Application name: Name of the application that has opened the connection.; Name is displayed for the applications identified by SF-OS. If Security Heartbeat is enabled under Advanced threat > Security Heartbeat then for applications that remain unidentified, Resolve application info link is displayed. Click the link to retrieve application information from the endpoint.; If Security Heartbeat is not enabled or endpoint devices are not connected, then No information available is displayed.
Source port: Source port of the connection.
Destination port: Destination port of the connection.
Master connection ID: Master connection ID of the current connection.
Rule ID: Firewall rule ID that allows the session.
Username: Name of the user establishing a connection.
Connection state: Displays the status of the connection.
Flags: System flag
User group: User group membership.
Web filter ID: Web filter policy ID applied on the connection traffic.
Application filter ID: Application filter policy ID applied on the connection traffic.
IPS policy ID: IPS policy ID applied on the connection traffic.
Traffic shaping policy ID: QoS policy ID applied on the connection traffic.
Remote access policy ID: Remote access policy ID applied on the connection traffic.
Gateway ID: Gateway ID through which the connection traffic is routed.
Web category ID: Web category ID applied on the connection traffic.
Application ID: Application ID applied on the connection traffic.
Application category ID: Application category ID applied on the connection traffic.
Connection served by: The firewall serving the connection.
Translated source: Translated source IP address for outgoing traffic.
Translated destination: Translated destination IP address for outgoing traffic.
Expiry (second): Connection will expire in displayed seconds if idle.
Rx bytes: The amount of data in bytes received in this session.
Tx bytes: The amount of data in bytes sent in this session.
Rx packets: Number of packets received in this session.
Tx packets: Number of packets sent in this session.
Connection status: Displays status of connection.