You can see the connection details of IPv4 and IPv6 traffic for applications, usernames, and source IP addresses.
You can see the data transfer, bandwidth consumed, number of connections, and other traffic details.
- To refresh the connection details automatically, select the Automatic refresh interval from the list.
To refresh manually, click Refresh.
To see the number of current connections, see Live connections in the upper left corner.
Live connections list
The live connection details shown are from the time a connection was established. For example, upload transfer is for total data uploaded from the time the connection was established.
To see the live connection details, select one of the following:
- Source IP address
The list shows the details of current connections as follows:
Shows the connected applications.
Other applications: Unrecognized applications and system-generated traffic, such as DNS queries and replies when the firewall is the DNS server, signature downloads, and console access.
DNS: DNS traffic to which firewall rules apply, for example traffic between an internal source and external DNS servers.
System-generated DNS traffic is listed under both DNS and Other applications.
|Source IP address
|Source IP address of the traffic.
|User who initiated the connection.
|Total amount of data uploaded, in bytes.
|Total amount of data downloaded, in bytes.
|Total upstream bandwidth used. It's the total transferred bytes divided by the total connection time (in seconds).
|Total downstream bandwidth used. It's the total transferred bytes divided by the total connection time (in seconds).
|Application details, such as application category and usage.
|Total number of connections for the application, username, or source IP address.
How to see the details
To sort a column in the list, click the heading.
- To apply a filter, click , select a modifier, and enter the search phrase. You can apply one filter at a time. To clear an existing filter, click Clear.
Click the Total to see the connection details.
This opens a new tab.
You can see the start time, inbound and outbound interfaces, source and destination ports and IP addresses, protocols, firewall and NAT rule IDs, and the total and live data transfer.
The firewall rule ID of system-generated traffic is set to zero because firewall rules don't apply to this traffic. It's controlled by the Local service ACL. See Access to local services from zones.