topic Re: Dispaying object name in traffic monitoring in General Topics

Dispaying object name in traffic monitoring

thkarim — Wed, 14 Dec 2016 14:36:03 GMT

Hi,

I would like to know if it's possible to display object name associated to each address in traffic logs. I cant find it in any columns but i'm wondering if there is another way to do it. In fact, we want to organise the logs to have a better visibility.

Thank you

Re: Dispaying object name in traffic monitoring

Brandon_Wertz — Wed, 14 Dec 2016 15:41:08 GMT

Directly what you're asking for...No.

You can select the "resolve hostname" checkbox at the bottom of the monitor page, but that obfuscates the IP of the object.

Re: Dispaying object name in traffic monitoring

reaper — Thu, 15 Dec 2016 09:18:17 GMT

I think what @Brandon_Wertz is suggesting is actually what is being asked for

by default the logs will display IP addresses, with the 'resolve hostnames' checkbox checked, the logs will display object names instead (and FQDN's for anything that can be resolved)

Re: Dispaying object name in traffic monitoring

thkarim — Thu, 15 Dec 2016 10:05:29 GMT

When i select the 'resolve hostnames' it doesnt display the object name of any address object that i created. i thought the hostname match only with FQDN.

Re: Dispaying object name in traffic monitoring

reaper — Thu, 15 Dec 2016 10:46:37 GMT

you are using single ip addresses, right, not subnets ?

the ip needs to match exactly to the object, it will not match subnets

Re: Dispaying object name in traffic monitoring

thkarim — Thu, 15 Dec 2016 13:35:32 GMT

Yes it's a single ip address, i create an object with a /32 address, the type i choose is IP Netmask, i wonder if there is an option to choose what to display when the 'resolve hostname' is selected. For information, the firewall is in a Tap Mode but i think it has nothing to do with it.

Re: Dispaying object name in traffic monitoring

reaper — Thu, 15 Dec 2016 14:58:41 GMT

it's because you added /32 which is redundant

try removing the subnetmask

Re: Dispaying object name in traffic monitoring

thkarim — Thu, 15 Dec 2016 15:18:04 GMT

I did it but it's not working as well

Re: Dispaying object name in traffic monitoring

Warron_F — Wed, 01 May 2024 18:28:08 GMT

It looks like this was never resolved.

Re: Dispaying object name in traffic monitoring

JayGolf — Wed, 08 May 2024 05:20:17 GMT

Hi @Warron_F ,

The firewall does not support viewing object names in the monitor traffic. At best, we can resolve hostnames for anything that can be resolved.