The Advanced menu allows super administrators to view and update information about the appliance and to run diagnostics about the appliance.
You must enable the Advanced menu before it becomes visible. Refer to Change Settings for more information.
Diagnostics
Use the Diagnostics menu options to run tests on the instance.
States
- Protocol: The communication protocol used (e.g., TCP, UDP).
- Source IP: The IP address of the device sending the data.
- Source Port: The port number on the source device.
- Destination IP: The IP address of the device receiving the data.
- Destination Port: The port number on the destination device.
- TTL: Time to live
- Bytes Sent/Received: The amount of data sent and received.
- Packets Sent/Received: The number of packets sent and received.
- Flags: Indicators used to control or identify specific conditions in the communication.
- Interface: The network interface through which the data is transmitted.
Packet Capture
The Packet Capture page allows you to capture and download network traffic directly from a selected firewall interface for troubleshooting, diagnostics, and traffic analysis. This page shows a list of packet capture (.pcap) files created on the firewall and provides controls to start new captures.
Interface Selection:
- Select the network interface (e.g. LAN) from the drop-down list.
- Packet captures will record traffic only on the selected interface.
Packet Capture Settings:
- Time Limit (minutes): Specify the maximum duration of the packet capture. The capture automatically stops when the time limit is reached.
- Packet Limit: Specify the maximum number of packets to capture. The capture automatically stops when the packet limit is reached.
Starting a Packet Capture:
- Select the desired interface.
- (Optional) Click Settings to configure capture parameters.
- Click Start Pcap to begin capturing packets. The capture runs until it is stopped or reaches configured limits.
Managing Capture Files
- Download capture files for analysis using tools such as Wireshark.
- Delete unused files to free disk space.
- Capture files are stored locally on the firewall.
Operational Notes:
- Packet capture may increase CPU and disk usage during capture.
- Limit capture duration and file size in production OT environments.
- Packet capture does not modify or block traffic.
Hot Processes
Click the Hot Processes option to view a list of processes using a high % of CPU.
System Counters
Click the System Counters option to view a list of counters that provide insight into appliance performance. The list can be sorted by name (alphabetical) or by value (# of counts). You can type into the filter box to search for specific counters.
Ping Test
Click the Ping Test option to run a ping test. Enter the server IP address or hostname in the Target Address box and click the Submit button. The results from the ping display.
TCP Connect
Click the TCP Connect option to view the result of the handshake between the client and the server that’s listening.
1) Enter an IP address or hostname in the Target Address box.
2) Enter a port number (required).
3) Click the Submit button. The handshake results display
Show Route
Click the Show Route option to view the route the packet took to get to its destination. Enter an IP address or hostname in the Target Address box and click the Submit button. The route displays.
Trace Route
Click the Trace Route option to display the route and time the packet took to get to its destination. It will do a maximum of 30 hops at 60 bytes per packet. Enter an IP address or hostname in the Target Address box and click the Submit button. The route and time display.
Statistics
Use the Statistics options to view information about the Processes running on the appliance and the amount of space used by each File System associated with the instance.
