13.1.3. Traffic log

The traffic log displays all events in which firewall rules or NAT rules have been triggered (providing that packet logging has been enabled). The following information is displayed:

  • The UserGate node where the event has taken place

  • Time of the event

  • User

  • Operation

  • Rule

  • Application

  • Protocol

  • Source zone

  • Source address

  • Source port

  • Destination IP

  • Destination port

  • NAT source IP (if this is a NAT rule)

  • NAT source port (if this is a NAT rule)

  • NAT destination IP (if this is a NAT rule)

  • NAT destination port (if this is a NAT rule)

  • Bytes sent/received

  • Packets

Administrators can filter and display columns as required. To do this, click any column and in the shortcut menu that appears enable the checkboxes that correspond to the necessary columns.

For convenience, you can filter and search certain events and records by various criteria, such as user account, rule, action, and more.

By clicking Export to CSV administrators can download the filtered data from a log as a CSV file for additional analysis.