Dispaying object name in traffic monitoring

[thkarim]

Hi,

I would like to know if it's possible to display object name associated to each address in traffic logs. I cant find it in any columns but i'm wondering if there is another way to do it. In fact, we want to organise the logs to have a better visibility.

Thank you

[Brandon_Wertz]

Directly what you're asking for...No.

You can select the "resolve hostname" checkbox at the bottom of the monitor page, but that obfuscates the IP of the object.

[reaper]

I think what @Brandon_Wertz is suggesting is actually what is being asked for

by default the logs will display IP addresses, with the 'resolve hostnames' checkbox checked, the logs will display object names instead (and FQDN's for anything that can be resolved)

[thkarim]

When i select the 'resolve hostnames' it doesnt display the object name of any address object that i created. i thought the hostname match only with FQDN.

[reaper]

you are using single ip addresses, right, not subnets ?

the ip needs to match exactly to the object, it will not match subnets

[thkarim]

Yes it's a single ip address, i create an object with a /32 address, the type i choose is IP Netmask, i wonder if there is an option to choose what to display when the 'resolve hostname' is selected. For information, the firewall is in a Tap Mode but i think it has nothing to do with it.

[reaper]

it's because you added /32 which is redundant

try removing the subnetmask

[thkarim]

I did it but it's not working as well 

[Warron_F]

It looks like this was never resolved.

[JayGolf]

Hi @Warron_F ,

The firewall does not support viewing object names in the monitor traffic. At best, we can resolve hostnames for anything that can be resolved.