Looking for a way to determine what traffic is actually allowed

DaleWest

Greetings-

Is there a definitive way via logging to determine what traffic is *actually* allowed *through* the firewall? I see tons of 'Connection opened' log entries, but it's obvious that the vast majority of those don't correspond to -actual- external connections to my internal machines. It seems exceedingly difficult to determine just what my firewall is actually doing.

MasterRoshi

Have you used NSM Analytics?

DaleWest

https://community.sonicwall.com/technology-and-support/discussion/comment/11479#Comment_11479

Hi there. No, I haven't. But I should be able to ascertain that information without an addon or a 3rd party product, shouldn't I?