Sessions ReaSoft Network Firewall allows you to monitor the activity of network objects by means of sessions and connections. Sessions represent the activity of a network object with an IP address. All connections established from one IP address via the ReaSoft Network Firewall server are considered one session. If a network client has more than one IP address, connections from each IP address will be considered as a separate session. A separate session will be created for connections established from the same IP address, but with the ReaSoft Network Firewall server.

The list of sessions is updated automatically at the specified period of time. If the client closes all connections of if client connections are closed by a timeout, the sessions is removed from the list.

There are three types of sessions: Direct, NAT, Route.

Direct sessions

Direct sessions occur when a client from any network establishes a connection with the ReaSoft Network Firewall server. Connections established from the ReaSoft Network Firewall servers to clients from any networks will be logged as a direct session. If a Redirect rule redirects connections with the ReaSoft Network Firewall server to internal servers in the Perimeter Network (aka DMZ), direct sessions are also created.

NAT sessions

NAT sessions occur when clients from private networks establish connections to resources from other networks and the network relationship is set as NAT in Network rules.

Route sessions

Route sessions occur when clients from one network establish connections to resources from other networks and the network relationship is set as Route in Network rules.

Starting and stopping monitoring sessions

To start monitoring sessions, click the Start on the toolbar. Click the Pause to pause monitoring. When paused, the session list will remain available for analysis and sessions will not be automatically updated. You can use the Reload button to update the list. Click the Stop to stop monitoring. It will clear the session list.