CHAPTER 35: Monitoring Active Firewall Connections

Setting Filter Logic

By default, the SonicOS filter logic is set to “Priority && Category && Source && Destination.” The double ampersand symbols (&&) indicate the boolean expression “and.” The default SonicOS filter logic displays all log events.

1Enter the source IP address in the Source IP field.

2Enter the destination IP address in the Destination IP field.

3Enter the destination port number in the Destination Port field.

4Select the protocol from the Protocol menu.

5Select the source interface from the Src Interface.

6Select the destination interface from Dst Interface.

7Click Apply Filters.

Using Group Filters

Use Group Filters to change the default SonicOS filter logic (Priority && Category && Source && Destination) from double ampersand symbols (&&) to double pipe symbols () to indicate the boolean expression “or.” When using group filters, select two or more Group Filters checkboxes.

If you select only one Group Filter checkbox, the filter logic will remain the same. Selecting only the Priority-Group Filter checkbox provides you with the following filter logic:

Source IP: (Priority) && Category && Source && Destination

198

SONICWALL SONICOS STANDARD 3.0 ADMINISTRATORS GUIDE

Page 217
Image 217
SonicWALL 3 manual Setting Filter Logic, Using Group Filters, Click Apply Filters