Geolocation - View past blocked connections in UI
Hello,
is there a way to view blocked connections, for example for the last 24 hours, via the geolocation dashboard? Like, can you view the attempted connections from a specific region with timestamps or di I need to use the Traffic Monitor for the specifics?
Thanks for the help
Regards,
MaEhl
0
Sign In to comment.
Comments
You need to use a log server to see historical info such as for 24 hours.
WG provides 3 options, WSM Log & Report servers, Dimension, and WG Cloud both which has log & report server functions.
Note that Dimension and WG Cloud requires the firewall to have a current LiveSecurity license whereas the WSM Servers do not.
WG Cloud requires a Basic Security license to keep 24 hours of data, and a Total Security license to keep 30 days of data.
Install WatchGuard System Manager Software
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/installation/install_wsm_wsm.html
Set Up & Administer Dimension
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/dimension/about-dimension_d.html
Monitor Devices in WatchGuard Cloud
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/device_monitor_intro.html
Alright, thanks for info, I will look into it.