The session managere allows viewing the list of current sessions of one device or a group of Kaspersky NGFW devices. You can also delete one, multiple, or all active sessions. You can view the list of sessions in the Application & Services → NGFW → Monitor → Session manager section for a Kaspersky NGFW device or group of devices.
Information about sessions is presented in a table with columns corresponding to session parameters, such as the hostname of the Kaspersky NGFW device, session creation and closing times, source and destination addresses and ports, and the volume of traffic. You can customize the table columns by adding or hiding columns.
If the number of sessions is large, the results are displayed on multiple pages. You can specify the number of sessions displayed per page (up to 100 sessions). To narrow down the results displayed in the table, you can use text queries as a primary filter. Text queries consist of parameters that you want to use for filtering, comparison operators and logical operators, as well as sorting parameters.
Example query:
|
You can find the full list of parameters used in the columns of the session table and in text queries for the primary filter in the Session parameters in the table and in text queries for the primary filter article.
The contents of the session table are not updated automatically. The contents of the table is generated when you open Session Manager or when you execute a primary filter query. You can click the Refresh button in the upper part of the table to manually update the table.