ManageEngine Firewall Analyzer - Information & Features

Home > Enterprise security devices or applications > Firewall Analyzer > ManageEngine Firewall Analyzer - information & Features

ManageEngine Firewall Analyzer

Introduction

What is Firewall Analyzer?

ManageEngine Firewall Analyzer is a web based tool for change management, configuration analysis, security audit of Firewall devices, bandwidth monitoring and security reporting. The software application analyzes the Firewall devices configurations, manages the configuration changes and audits security of devices. It collects, analyzes, and archives logs from network perimeter security devices and generates reports.

Key Features

• Generates automated reports on firewall traffic, security threats, and rule effectiveness.
• Monitors bandwidth consumption and helps optimize network performance.
• Detects and alerts on security incidents such as intrusions, malware, and unauthorized access.
• Provides insights into user activities, ensuring compliance with company policies.
• Offers VPN usage analysis to track remote access connections.

Firewall Analyzer Dashboard

The Firewall Analyzer Dashboard is structured into multiple tabs, each focusing on a specific aspect of network monitoring and security.

Main Dashboard Sections

1. Overview – Displays key firewall statistics and insights.
2. Live Traffic – Provides real-time traffic monitoring.
3. Cloud Control – Tracks cloud service usage.
4. Users – Monitors user activity and access patterns.
5. VPN – Analyzes VPN connections and usage.
6. Rule Management – Evaluates firewall rules for optimization.
7. Security – Reports security threats and vulnerabilities.
8. Compliance – Ensures adherence to industry standards.

Dashboard Features

Overview Tab

• Device List – Displays firewalls actively sending logs.
• Traffic Statistics – Categorizes traffic data by protocol, web, and email activity.
• Security Events – Highlights detected threats such as attacks and port scans.
• Top Applications by Traffic – Identifies applications consuming the most bandwidth.
• Top Hosts and Countries by Traffic – Provides insights into network activity origins.
• Top Hosts by Attacks – Shows the most frequently targeted devices.

Live Traffic Tab

• Offers a real-time visualization of network traffic.
• Displays current bandwidth consumption across different links.

Cloud Control Tab

• Monitors cloud-based services accessed via the firewall.
• Reports on:
  • Most used cloud services.
  • Top cloud-based applications.
  • Business-related cloud services.
  • Social media traffic.
  • File-sharing activity.

Users Tab

• Helps track user activity within the network.
• Key reports:
  • Top Users by Traffic – Highlights high-bandwidth users.
  • Top Cloud Users – Lists users frequently accessing cloud platforms.
  • Top VPN Users – Identifies employees using VPN services.
  • Denied Login Attempts – Reports unauthorized access attempts.

VPN Tab

• Provides insights into VPN usage and connectivity.
• Reports include:
  • Top VPN Connections by Traffic – Shows VPN sessions with the most data usage.
  • VPN Groups Usage – Monitors VPN activity by user groups.
  • Active VPN Users – Displays real-time VPN session details such as:
    • Device Name.
    • VPN User.
    • Host IP.
    • VPN Type.
    • Connection Start Time.
    • Duration.

Rule Management Tab

• Optimizes firewall rules by identifying inefficient or redundant policies.
• Importance of Firewall Rules:
  • Traffic Filtering – Controls access based on IP, ports, and protocols.
  • Security Enforcement – Blocks malicious attempts and unauthorized traffic.
  • Policy Compliance – Ensures all network traffic aligns with company regulations.
  • Performance Enhancement – Prioritizes business-critical applications.
  • Auditing and Logging – Keeps records of firewall activity for analysis.

Security Tab

• Detects and reports security risks.
• Key reports:
  • Security Events Summary – Lists major security alerts.
  • Blocked URLs – Displays websites restricted by firewall rules.
  • Spam Senders – Identifies email sources generating spam.
  • Frequent Attacks – Shows attack types, sources, and affected devices.
  • Virus Activity – Tracks malware threats across the network.

Inventory Dashboard

Device Management

• Displays all registered firewall devices and their details:
  • Device Name.
  • License Status (Managed/Unmanaged).
  • IP Address.
  • Firewall Type.
  • Vendor Information.
  • Network Speed Metrics.
  • Configuration Settings.

Device Summary

• Provides a breakdown of firewall traffic and security performance.
• Key reports:
  • Traffic Summary – Tracks inbound and outbound data.
  • Bandwidth Utilization – Details data usage by IP, users, and severity.
  • Top 10 Reports – Highlights the most active hosts, applications, and URLs.
  • Website Access Report – Shows allowed and blocked site traffic.
  • Application Analysis – Monitors applications running through the firewall.
  • Firewall Rules Report – Evaluates rule effectiveness and compliance.
  • Security Threats Report – Summarizes detected attacks, viruses, and policy violations.
  • VPN Report – Displays ongoing VPN sessions and connection logs.

Conclusion

This ManageEngine Firewall Analyzer Knowledge Base provides a comprehensive guide to its core functionalities. By leveraging its traffic monitoring, security insights, and compliance tools, administrators can efficiently manage firewall policies, detect threats, and optimize network performance.

Home > Enterprise security devices or applications > Firewall Analyzer > ManageEngine Firewall Analyzer - information & Features|Information and Features