Sophos XG Firewall Web Interface Reference and Admin Guide v16.5

| Appendix A - Logs | 546 category="Mobile Applications" application_name="Gtalk Android" application_risk=4 application_technology="Client Server" application_category="Mobile Applications" src_ip=5.5.5.15

src_country_code=DEU dst_ip=74.125.130.188 dst_country_code=USA protocol="TCP" src_port=49128 dst_port=5228 sent_bytes=0 recv_bytes=0 status="Deny" message=""

Module-specific Fields

Data Fields

fw_rule_id

Type

integer user_name user_group application_filter_policy category application_name application_risk application_technology application_category src_ip src_country_code dst_ip dst_country_code protocol src_port dst_port sent_bytes string string integer string string integer string string string string string integer integer integer integer integer

Description

Firewall Rule ID which is applied on the traffic

User name

Group name to which the user belongs.

Application Filter Policy ID applied on the traffic

Name of the category under which application falls

Name of the application accessed

Risk level assigned to the application

1 - VERY LOW

2 - LOW

3 - MEDIUM

4 - HIGH

5 - VERY HIGH

Technology of the application

Browser Based

Client Server

Network Protocol

P2P

Name of the category under which application falls

Original Source IP address of traffic

Code of the country to which the source

IP belongs

Original Destination IP address of traffic

Code of the country to which the destination IP belongs

Protocol number of traffic

Original Source Port of TCP and UDP traffic

Original Destination Port of TCP and

UDP traffic

Total number of bytes sent