Can Analytics filter traffic by Access Rule matched

Yuber_Sierra

Hello,

In Analytics On-premises, ¿do you know if there is any way to filter traffic session logs by firewall rule, so that one can know which sources and destinations are matching a rule?

Thank you.

Saravanan

Hi @YUBER_SIERRA,

Thank you for visiting SonicWall Community.

Traffic session logs can be filtered using parameters such as source, destination, users, etc,., Unfortunately, not by the access rule that matches the traffic. This is because, access rule matching happens at the firewall and firewall just sends the syslogs/flows to the on-prem analytics. So the analytics wouldn't know the way of what rule was matched on the firewall and it only knows the logs sent from the firewall.

Hope this clarifies.