Connection list
The connection list provides a current or live connection snapshot of your device. It shows the connection information. You can filter the connection list.
You can set the refresh interval to automatically refresh the list at the configured time interval. To manually refresh the list, click Refresh. To filter the connection list, click Display filter and specify the parameters.
Connection list
Option | Description |
---|---|
Time | Connection establishment time in the format HH:MM:SS. |
Connection ID | Unique ID assigned to a connection. For more information, click an ID. The pop-up only shows data if there are related connections, such as those with the web proxy or those created by FTP, SIP, or other protocols. |
In interface | Port used for the incoming connection. |
Out interface | Port used by the outgoing connection. |
Source IP | Source IP address (IPV4/IPv6) of the connection. |
Destination IP | Destination IP address (IPV4/IPv6) of the connection. |
NAT ID | NAT rule ID used by the connection. |
Protocol | Protocol used by the connection, like TCP or UDP. |
Application name | Name of the application that has opened the connection. Name is displayed for the applications identified by SF-OS. If Security Heartbeat is enabled under Sophos Central > Security Heartbeat then for applications that remain unidentified, Resolve application info link is displayed. Click the link to retrieve application information from the endpoint. If Security Heartbeat is not enabled or endpoint devices are not connected, then No information available is displayed. |
Source port | Source port of the connection. |
Destination port | Destination port of the connection. |
Master connection ID | The main connection ID of the current connection. |
Rule ID | Firewall rule ID that allows the session. |
Username | Name of the user establishing a connection. |
Connection status | Displays the status of the connection. |
Flags | System flag |
User group | User group membership. |
Web filter ID | Web filter policy ID applied on the connection traffic. |
Application filter ID | Application filter policy ID applied on the connection traffic. |
IPS policy ID | IPS policy ID applied on the connection traffic. |
Traffic shaping policy ID | QoS policy ID applied on the connection traffic. |
Remote access policy ID | Remote access policy ID applied on the connection traffic. |
Gateway ID | Gateway ID through which the connection traffic is routed. |
Web category ID | Web category ID applied on the connection traffic. |
Application ID | Application ID applied on the connection traffic. |
Application category ID | Application category ID applied on the connection traffic. |
Connection served by | The firewall serving the connection. |
Translated source | Translated source IP address for outgoing traffic. |
Translated destination | Translated destination IP address for outgoing traffic. |
Expiry (second) | Connection will expire in displayed seconds if idle. |
Rx bytes | The amount of data in bytes received in this session. |
Tx bytes | The amount of data in bytes sent in this session. |
Rx packets | Number of packets received in this session. |
Tx packets | Number of packets sent in this session. |
Connection status | Displays status of connection. |