Skip to content

Connection list

Connection list provides a current or live connection snapshot of your device. It shows the connection information. You can filter the connection list. Click Connection ID to see a live snapshot of a specific connection.

You can set the refresh interval to automatically refresh the list at the configured time interval. To manually refresh the list, click Refresh. To filter the connection list, click Display filter and specify the parameters.

Connection list

Option Description
Time Connection establishment time in the format HH:MM:SS.
Connection ID Unique ID assigned to a connection.
In interface Port used for the incoming connection.
Out interface Port used by the outgoing connection.
Source IP Source IP address (IPV4/IPv6) of the connection.
Destination IP Destination IP address (IPV4/IPv6) of the connection.
NAT ID NAT rule ID used by the connection.
Protocol Protocol used by the connection, like TCP or UDP.
Application name Name of the application that has opened the connection.
Name is displayed for the applications identified by SF-OS. If Security Heartbeat is enabled under Sophos Central > Security Heartbeat then for applications that remain unidentified, Resolve application info link is displayed. Click the link to retrieve application information from the endpoint.
If Security Heartbeat is not enabled or endpoint devices are not connected, then No information available is displayed.
Source port Source port of the connection.
Destination port Destination port of the connection.
Master connection ID The main connection ID of the current connection.
Rule ID Firewall rule ID that allows the session.
Username Name of the user establishing a connection.
Connection status Displays the status of the connection.
Flags System flag
User group User group membership.
Web filter ID Web filter policy ID applied on the connection traffic.
Application filter ID Application filter policy ID applied on the connection traffic.
IPS policy ID IPS policy ID applied on the connection traffic.
Traffic shaping policy ID QoS policy ID applied on the connection traffic.
Remote access policy ID Remote access policy ID applied on the connection traffic.
Gateway ID Gateway ID through which the connection traffic is routed.
Web category ID Web category ID applied on the connection traffic.
Application ID Application ID applied on the connection traffic.
Application category ID Application category ID applied on the connection traffic.
Connection served by The firewall serving the connection.
Translated source Translated source IP address for outgoing traffic.
Translated destination Translated destination IP address for outgoing traffic.
Expiry (second) Connection will expire in displayed seconds if idle.
Rx bytes The amount of data in bytes received in this session.
Tx bytes The amount of data in bytes sent in this session.
Rx packets Number of packets received in this session.
Tx packets Number of packets sent in this session.
Connection status Displays status of connection.