•
|
Applications Map—Reports all applications the firewall identifies, including various Attributes, Signature IDs, App IDs, Category Names, and Category IDs.
|
•
|
Viruses Map—Reports all viruses detected by the firewall.
|
•
|
Spyware Map—Reports all spyware detected by the firewall.
|
•
|
Intrusions Map—Reports all intrusions detected by the firewall.
|
•
|
Location Map—Represents SonicWALL’s location map describing the list of countries and regions with their IDs.
|
•
|
Services Map—Represents SonicWALL’s list of Services with Port Numbers, Protocol Type, Range of Port Numbers, and Names.
|
•
|
Rating Map—Represents SonicWALL’s list of Rating IDs and the Name of the Rating Type.
|
•
|
Table Layout Map—Reports SonicWALL’s list of tables to be exported, including Table ID and Table Names.
|
•
|
Column Map—Represents SonicWALL’s list of columns to be reported with Name, Type Size, and IPFIX Standard Equivalents for each column of every table.
|
•
|
Connections—Reports SonicWALL connections. The same flow tables can be reported multiple times by configuring triggers.
|
•
|
Users—Reports users logging in to the firewall via LDAP/RADIUS, Local, or SSO.
|
•
|
URLs—Reports URLs accessed through the firewall.
|
•
|
URL ratings—Reports Rating IDs for all URLs accessed through the firewall.
|
•
|
VPNs—Reports all VPN tunnels established through the firewall.
|
•
|
Devices—Reports the list of all devices connected through the firewall, including the MAC addresses, IP addresses, Interface, and NETBIOS name of connected devices.
|
•
|
SPAMs—Reports all email exchanges through the SPAM service.
|
•
|
Locations—Reports the Locations and Domain Names of an IP address.
|
•
|
VoIPs—Reports all VoIP/H323 calls through the firewall.
|
The following section shows examples of the type of Netflow template tables that are exported. You can perform a Diagnostic Report of your own Netflow Configuration by navigating to the System > Diagnostics screen, and click the Download Report button in the Tech Support Report section.
First two bits hold the sampling mode; remaining 14 bits hold value of sampling interval |
An example of a NetFlow version 9 template is displayed below.
The following table details the NetFlow version 9 Template FlowSet field descriptions.
The total length in bytes of all reported fields in the NetFlow template. |
|
An example of an IPFIX (NetFlow version 10) template.
The following table details the IPFIX Template FlowSet Field Descriptions.
The total length in bytes of all reported fields in the NetFlow template. |
|
The following template is an example of an IPFIX with extensions template.