# View connections, block lists, VPN SAs, users, routing, SSL VPNs, and neighbors

There are several views in which you can monitor the status of the system.

##

The Block list view does not show whether connections matching the entries are blocked by the Engine, Layer 2 Engine, or IPS engine. Block list entries are added and removed according to their duration. The Block list view does not show any history of entries that have already expired. Use the Logs view to see information about actual connections that are allowed and denied. Depending on the logging options selected in the policy, you can also use the Logs view to see past block list entry creation.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Right-click an Security Engine, then select Monitoring > <view type>.
   To open the Neighbor monitoring view for an Security Engine cluster, right-click an individual node in the cluster, then select Monitoring > Neighbors.
   Tip: If the Drill-downs pane is open, you can also select Monitoring > <view type> from there.
2. To browse the data, select an option from the toolbar.
   You can adjust the view and the displayed data in a similar way as in the Logs view.
3. To filter data or open or compare snapshots, select the Filter tab or the Snapshots tab in the Query pane.
4. To combine entries having the same value for a given column type, right-click the heading of the corresponding column, then select Aggregate by <column name>.
5. Select one or more entries in the table, then right-click for a menu of actions you can take.
   - To view more information about related log events, select Show Referenced Events.
   - To block list connections manually, select New Block list Entry or New Entry.
   - To close a connection in the Connections view, select Terminate.
   - To remove a block list entry in the Block list view, select Remove Entry.
   - To force an SA to renegotiate in the VPN SAs view, select Delete.
   - To close the end user’s session in the Users view, select Delete.

## Connections view

Use this view to monitor connections.

Option | Definition
--- | ---
Toolbar
Save Column Settings | Saves the current column selection.
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Statistics menu | Shows the monitored data as charts. Select one of the predefined statistical items or select Select to create a custom statistical item.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.
Text Size | Increases or decreases the text size.
Time Zones | Allows you to select the time zone for viewing entries.
Show Milliseconds | When selected, the time stamp of entries includes milliseconds.
Use Color Filters | When selected, entries are shown using color filters.
Show Icons | When selected, element icons are shown in entries.
Resolve Addresses by DNS | When selected, IP addresses in entries are resolved using DNS.
Resolve Addresses by Elements | When selected, element names are shown instead of IP addresses.
Resolve Senders | When selected, the name of the Engine is shown in the Sender column instead of the IP address of the Engine.

Option | Definition
--- | ---
Connections table — Several menu options are available when you select a log entry and right-click.
Show Referenced Events | View more information about related log events.
New Block list Entry | Opens the Block list Entry Properties dialog box, where you can Block list a connection manually.
Terminate | Terminates a connection in the Connections view.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## Block list view

Use this view to monitor current block list entries.

Option | Definition
--- | ---
Toolbar
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.

Option | Definition
--- | ---
Block List entries table — Several menu options are available when you select an entry and right-click.
Show Referenced Events | View more information about related log events.
Remove Entry | Remove a block list entry in the Block list view.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## VPN SAs view

Use this view to monitor active VPN SAs.

Option | Definition
--- | ---
Toolbar
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.

Option | Definition
--- | ---
VPN SAs table — A menu option is available when you select an entry and right-click.
Delete | Forces an SA to renegotiate.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## SSL VPNs view

Use this view to monitor SSL VPNs.

Option | Definition
--- | ---
Toolbar
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.

Option | Definition
--- | ---
SSL VPN table — There is a menu option available when you select an entry and right-click.
Terminate | Terminates the SSL VPN session.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## Users view

Use this view to monitor active users.

Option | Definition
--- | ---
Toolbar
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.

Option | Definition
--- | ---
Users table — A menu option is available when you select an entry and right-click.
Delete | Closes the end user’s session.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## Routing view

Use this view to monitor the routing of a selected engine.

Option | Definition
--- | ---
Toolbar
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Tools menu
Visualization | Opens the Visualization tab.
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.

Option | Definition
--- | ---
Routing table | Shows the routing entries for the selected engine.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.

## Neighbor monitoring view

Use this dialog view to monitor information that the Security Engine has received about devices in directly connected networks.

Option | Definition
--- | ---
Toolbar
Save Column Settings | Saves the current column selection.
Play | Shows current entries.
Pause | Creates a temporary snapshot of entries.
Stop | Aborts the running query.
Save | Saves a snapshot of entries.
Statistics menu | Shows the monitored data as charts. Select one of the predefined statistical items or select Select to create a custom statistical item.
Tools menu
Columns | Column Selection — Opens the Column selection dialog box. Reset to Default Settings — Discards changes to the column selection and reverts to the previously saved default settings.
Text Size | Increases or decreases the text size.
Time Zones | Allows you to select the time zone for viewing entries.
Show Milliseconds | When selected, the time stamp of entries includes milliseconds.
Use Color Filters | When selected, entries are shown using color filters.
Show Icons | When selected, element icons are shown in entries.
Resolve Addresses by DNS | When selected, IP addresses in entries are resolved using DNS.
Resolve Addresses by Elements | When selected, element names are shown instead of IP addresses.
Resolve Senders | When selected, the name of the Engine is shown in the Sender column instead of the IP address of the Engine.

Option | Definition
--- | ---
Neighbors table
Protocol | Shows the protocol of the neighbor monitoring packet.
Interface | Shows the interface on the Security Engine through which the neighbor monitoring packet was received.
L3 Data | Shows the following information depending on the protocol of the neighbor monitoring packet: ARP — Shows the IPv4 address of the neighbor. IPv6 neighbor discovery protocol — Shows the IPv6 address of the neighbor. LLDP — Shows the value of the MgmtIP TLV if it is available. If the MgmtIP TLV is not available, but the ChassisID TLV is of the type network address, shows the value of the ChassisID TLV.
L2 Data | Shows the following information depending on the protocol of the neighbor monitoring packet: ARP — Shows the MAC address of the neighbor. IPv6 neighbor discovery protocol — Shows the MAC address of the neighbor. LLDP — If the ChassisID TLV is of the type MAC address, shows the value of the ChassisID TLV. If the ChassisID TLV is not of the type MAC address, and the PortID TLV is of the type MAC address, shows the value of the PortID TLV.
State | Indicates whether the information is up-to-date or whether the neighbor is reachable.
Information Message (LLDP only) | Shows the LLDP data as text if it is available.

Option | Definition
--- | ---
Query pane
Filter tab
New | Select — Opens the Select Filter dialog box. New — Select the type of new filter to create. The Filter Properties dialog box opens. Row — Adds an empty row to the Filters table.
Save | Opens the Filter Properties dialog box that allows you to save the current filtering criteria as a permanent Filter element.
Snapshots tab | Allows you to compare snapshots of entries. The names of the snapshots selected for comparison are shown in two separate fields. Current compares the current entries with a previously saved snapshot. Current is only available if the view is in the Current Events mode. If you click Pause in the toolbar a temporary snapshot of the current entries is selected as the first snapshot for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the first snapshot for comparison.
Compare with | Select to compare snapshots.
Second field | Shows the second snapshot selected for comparison.
Select | Opens the Select Element dialog box, where you can select a previously saved snapshot as the second snapshot for comparison.
Apply | Applies your changes.

Option | Definition
--- | ---
Fields pane
Category drop-down list | Watchlist — Allows you to create a customized list of fields to show in entries. All — Allows you to view all fields in entries.
Field | The name of the field.
Value | The value in the field.