Dispaying object name in traffic monitoring

Reply
Highlighted
L1 Bithead

Dispaying object name in traffic monitoring

Hi,

 

I would like to know if it's possible to display object name associated to each address in traffic logs. I cant find it in any columns but i'm wondering if there is another way to do it. In fact, we want to organise the logs to have a better visibility.

 

Thank you

Highlighted
Cyber Elite

Directly what you're asking for...No.

 

You can select the "resolve hostname" checkbox at the bottom of the monitor page, but that obfuscates the IP of the object.

Highlighted
L7 Applicator

I think what @Brandon_Wertz is suggesting is actually what is being asked for

 

by default the logs will display IP addresses, with the 'resolve hostnames' checkbox checked, the logs will display object names instead (and FQDN's for anything that can be resolved)

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Highlighted
L1 Bithead

When i select the 'resolve hostnames' it doesnt display the object name of any address object that i created. i thought the hostname match only with FQDN.

Highlighted
L7 Applicator

you are using single ip addresses, right, not subnets ?

the ip needs to match exactly to the object, it will not match subnets

 

2016-12-15_11-44-47.png

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Highlighted
L1 Bithead

Yes it's a single ip address, i create an object with a /32 address, the type i choose is IP Netmask, i wonder if there is an option to choose what to display when the 'resolve hostname' is selected. For information, the firewall is in a Tap Mode but i think it has nothing to do with it.object.JPG

 

 

srcaddress.JPG

 

 

 

Highlighted
L7 Applicator

it's because you added /32 which is redundant

try removing the subnetmask

address object.png

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Highlighted
L1 Bithead

I did it but it's not working as well 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!