Firewall Analyzer - Diagnose Firewall Connections - How to

1. How to diagnose the active connections passing through the firewall device?

1. In the Firewall Analyzer web client, select the Settings tab.
2. In Settings screen, click the Firewall > Firewall Server > Diagnose connections link. Diagnose connections page appears.
3. In that page, choose the Device Name, Device Type, Login Profile, and Define Criteria.
   
   1. Select the device name from the drop down list. Only the NetScreen and Cisco devices will be listed.
   2. Select the device type (PIX, ASA, FWSM) from the drop down list, in the case Cisco devices. This field is not available for other devices.
   3. Select the login profile from the drop down list. Choose an existing profile or add a new profile by clicking Add icon beside the drop down list. Carry out the procedure given in the Add New Profile document.
4. Define the criteria to fetch the connection for diagnosis using Define Criteria drop down list.
5. Click Fetch Connection to fetch the connections for diagnosis. The result will be displayed at the bottom part of the screen.

2. How to define criteria to fetch active connections passing through the firewall?

1. You should choose  criteria to fetch the connection for diagnosis using Define Criteria drop down list.
2. The criteria are IP Address, Between IPs, Protocol, and Port. Enter the value in the text box. By default only one criteria is displayed. To add more criteria, click Add icon and to remove criteria, click Remove icon.

3. How to assign login profile to firewall to fetch active connections?

1. If a credential profile is already associated with the device, Firewall Analyzer will not prompt you to enter the device login profile.
2. If a credential profile is not associated with the device, you can choose a credential profile to login to the firewall device using Telnet/SSH. However, the profile chosen will be retained and used only for Diagnose Connection purpose. To associate the login profile to this firewall device so that the settings will be retained in all other features, go to Settings screen, click the Assign Profile link in the Settings > Firewall Server > Credential Profile page. Use the procedure given in the Assign Profile document.