You are here: Products > Unified Threat Management > About the Reports Menu > Reports > Realtime > Firewall

Viewing Realtime Firewall Information

Note: This topic applies to the Kenilworth Release.

The Reports > Realtime > Firewall page displays network traffic connections currently passing through the Smoothwall firewall:

where:

Time — When the network connection was first detected.
Inbound interface — The network interface the connection came in through.
Outbound interface — The network interface, if any, the connection is routed to.
Source IP — The IP address of where the connection originated from. If source NAT-ing was applied to this log entry, the IP address shown here is before the source NAT rule was applied.
Destination IP — The IP address, if any, of where the connection is routed to, taken from the packet header. If port forwarding was applied to this log entry, the IP address shown here is after the port forward rule was applied.
Protocol — The protocol and IP protocol number taken from packet header.
Source Port — The port number, if any, of where the connection originated from.
Destination Port — The port number, if any, of where the connection is routed to, taken from the packet header.
Rule — The firewall, Smoothwall access, port forward, or advanced networking rule this connection matched. Clicking the rule name brings you to the relevant configuration page.
Action — Whether this particular connection was accepted, dropped, or rejected. An entry of N/A is typically seen for audited traffic entries.

Tip: The amount of Firewall log data retained by the Smoothwall depends on the Datastore's log retention settings — see Managing Datastore Log Retention.