|
•
|
Applications Map—Reports all applications the firewall identifies, including various Attributes, Signature IDs, App IDs, Category Names, and Category IDs.
|
|
•
|
Viruses Map—Reports all viruses detected by the firewall.
|
|
•
|
Spyware Map—Reports all spyware detected by the firewall.
|
|
•
|
Intrusions Map—Reports all intrusions detected by the firewall.
|
|
•
|
Location Map—Represents SonicWALL’s location map describing the list of countries and regions with their IDs.
|
|
•
|
Services Map—Represents SonicWALL’s list of Services with Port Numbers, Protocol Type, Range of Port Numbers, and Names.
|
|
•
|
Rating Map—Represents SonicWALL’s list of Rating IDs and the Name of the Rating Type.
|
|
•
|
Table Layout Map—Reports SonicWALL’s list of tables to be exported, including Table ID and Table Names.
|
|
•
|
Column Map—Represents SonicWALL’s list of columns to be reported with Name, Type Size, and IPFIX Standard Equivalents for each column of every table.
|
|
•
|
Connections—Reports SonicWALL connections. The same flow tables can be reported multiple times by configuring triggers.
|
|
•
|
Users—Reports users logging in to the firewall via LDAP/RADIUS, Local, or SSO.
|
|
•
|
URLs—Reports URLs accessed through the firewall.
|
|
•
|
URL ratings—Reports Rating IDs for all URLs accessed through the firewall.
|
|
•
|
VPNs—Reports all VPN tunnels established through the firewall.
|
|
•
|
Devices—Reports the list of all devices connected through the firewall, including the MAC addresses, IP addresses, Interface, and NETBIOS name of connected devices.
|
|
•
|
SPAMs—Reports all email exchanges through the SPAM service.
|
|
•
|
Locations—Reports the Locations and Domain Names of an IP address.
|
|
•
|
VoIPs—Reports all VoIP/H323 calls through the firewall.
|
The following section shows examples of the type of Netflow template tables that are exported. You can perform a Diagnostic Report of your own Netflow Configuration by navigating to the System > Diagnostics screen, and click the Download Report button in the Tech Support Report section.
|
First two bits hold the sampling mode; remaining 14 bits hold value of sampling interval |
An example of a NetFlow version 9 template is displayed below.
The following table details the NetFlow version 9 Template FlowSet field descriptions.
|
The total length in bytes of all reported fields in the NetFlow template. |
|
An example of an IPFIX (NetFlow version 10) template.
The following table details the IPFIX Template FlowSet Field Descriptions.
|
The total length in bytes of all reported fields in the NetFlow template. |
|
The following template is an example of an IPFIX with extensions template.