Skip to main content
Lucascat
New Member
August 28, 2015
Solved

Monitor/see session by IP

  • August 28, 2015
  • 3 replies
  • 19057 views

How can I monitor/see all session of a particular IP?

Best answer by FortiAdam

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

3 replies

FortiAdam
FortiAdamAnswer
New Member
August 28, 2015

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

Lucascat
LucascatAuthor
New Member
August 29, 2015

FortiAdam wrote:

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

Thank you Adam.

No way via GUI?

FortiAdam
New Member
August 31, 2015

There isn't anywhere to view actual session info per se but you might find the info under "Policy > Monitor" to be helpful.  Creating an extra policy to isolate the traffic you are interested in to get a more focused look at the info you are needing will help if necessary.  Otherwise you can configure your policy for logging all sessions and view the traffic logs.  

 

Those are probably your best options unless someone has another alternative? 

ede_pfau
SuperUser
SuperUser
August 31, 2015

In FortiOS v5.2, use the FortiView menu entry. At first, it looks like a session table but you can filter and drill down into the sessions if you need. This replaces the Policy Monitor and the session widget with a much more powerful alternative. See the Release Notes for v5.2.3 and v5.2.4 for latest enhancements.