View network activity for Firewall Management in OneView

The Activity tab of the Firewall Management page displays blocked connections and triggered firewall rules. To access the page, on the left navigation menu, go to Manage > Firewall Management. 

View firewall activity widgets

The following diagrams and tables are available to provide an overview of blocked network activity:

• Top 5 endpoints with blocked connections: The 5 endpoints with the most blocked connections in the last 30 days
• Blocked connections: The number of blocked connections in the last 30 days.

Firewall activity table

The table on the Activity tab displays allowed and blocked network traffic based on firewall rules across your endpoints over the last 30 days. View the following information for each firewall activity record:

• Action: Allow or block.
• End Time: Time the firewall rule stopped being triggered.
• Endpoint: The endpoint that triggered the firewall rule.
• Hits: Number of times the firewall rule was triggered.
• Program: The program that triggered the firewall.
• Protocol: The network protocol blocked by the firewall.
• Rule: Name of the firewall rule that was triggered.
• Site: Site of the endpoint that triggered the firewall rule.
• Start Time: Time the firewall rule was triggered.
• Traffic Type: Inbound or outbound traffic.

Click Add / Remove Columns to choose which columns to display. 

Filter and sort data

Use the following features to filter and sort data on the Rules tab:

• Filter results: Next to a column header, click the filter icon  to narrow the results. When clicking on the filter icon, the filter list at the top of the screen shows which filters are applied. Click on a filtered item to remove it, or Reset filters/groups to default to remove them all. 
• Column pinning and auto-sizing: Next to a column header, click the hamburger menu button to display a checkbox list of different sub-filters you can apply. Click the hamburger menu button to pin or auto size for the selected column.
• Right-click menu: In the table, click and drag to select and highlight a section of the table. Right-click on your selected information to copy the cells and information.
• Select all: Click the checkbox next to the Start time column header.

Export data

To download data to your local machine:

1. Select all or check specific boxes for the rows you want to export.
2. Click the ellipsis button.
3. Select Download .csv or Download .xlsx.

If the data size is too large to download, an email will be sent instead with a link to download the export.

Return to OneView Firewall Management guide.