User guide

Chapter 12: Monitoring Firebox Activity
170 WatchGuard Firebox System
3 To restart the display, click Continue (shown at right).
4 To step through the display one entry at a time, click the
Pause icon. Click the right arrow to step forward
through the log. Click the left arrow to step backward
through the log.
Controlling the HostWatch display
You can selectively control the HostWatch display. This feature can be
useful for monitoring the activities of specific hosts, ports, or users. From
HostWatch:
1 Select View => Filters.
2 According to what you want to monitor, click the Inside Hosts,
Outside Hosts, Ports, or Authenticated Users tab.
3 Clear the checkbox marked Display All Hosts, Display All Ports, or
Display All Authenticated Users.
4 Enter the IP address, port number, or user ID you want to monitor.
Click Add.
Repeat for each entity that HostWatch should monitor.
5 Click OK.
Modifying HostWatch view properties
You can change how HostWatch displays information. For example,
HostWatch can display host names rather than IP addresses. From
HostWatch:
1 Select View => Properties.
2 Use the Host Display tab to modify host display and text options.
For a description of each control, right-click it and then select What’s This?.
3 Use the Line Color tab to choose colors for lines drawn between
denied, dynamic NAT, proxy, and normal connections.
4 Use the Misc. tab to control the refresh rate of the real-time display
and the maximum number of connections displayed.