Monitoring connections, block lists, VPN SAs, users, routing, SSL VPNs, and neighbors
Engines track allowed connections, active VPN SAs, active users, routing, SSL VPN sessions, and directly connected neighbors in the network. Engine, Layer 2 Engine, and IPS engines also track combinations of IP addresses, ports, and protocols that are block listed.
You can monitor in the following ways:
- View currently open connections, enforced block list entries, active VPN SAs, active users, routing, SSL VPNs, and directly connected neighbors in the network.
- Save, view and compare snapshots of currently open connections, enforced block list entries, active VPN SAs, active users, routing, and SSL VPN sessions.
Note: To monitor LLDP neighbors, LLDP must be enabled for the Secure SD-WAN Engine. If LLDP is not enabled, the Neighbor Monitoring view only shows ARP and IPv6
neighbor discovery protocol (NDP) entries.
To monitor users by name, you must enable the logging of user information in the Engine IPv4 and IPv6 Access rules. When monitoring users, you can only monitor the users connected to a particular Secure SD-WAN Engine. To see a summary of the activity of all active users, enable showing users in the Dashboard view.