Views:
Contains information pertaining to logs where traffic has been permitted by firewall rules that have logging enabled, including packets that were permitted by the content filtering configuration.

Definition

dbAccess/tptDBServlet?method=GetData&table=FIREWALL_TRAFFIC_ALERTS

Parameters

Column Description
SEQUENCE_NUM Reference to a particular logs row entry counter.
DEVICE_ID Identifier for the DEVICE entry that sent the notification.
END_TIME Time in which the notification was sent to the Management Console.
  • Value is in milliseconds (since Jan. 1, 1970 00:00:00 GMT)
  • Subtract BEGIN_TIME from TIME_END to determine the length of an attack, if aggregation is being used.
SRC_IP_ADDR Packet source IP address.
SRC_PORT Packet source port.
DST_IP_ADDR Packet destination IP address.
DST_PORT Packet destination port.
RULE_ID Unique identifier to monitor traffic between security zones.
PROTOCOL_NAME Packet type.
PROTOCOL_NUMBER Protocol number in the filter.
IN_ZONE_UUID Security zone from which the attack originated.
OUT_ZONE_UUID Security zone from which the attack was targeted.
CATEGORY Type of traffic filter that was activated.
DURATION Duration of the attack.
URL URL that was associated with the attack.
TRANSFER_BYTES Number of bytes transferred for the event.
MESSAGE Dynamic ALERT message.