Overview
Kerio Control displays the hosts within the local network, or active users using Kerio Control for communication with the Internet in Status > Active Hosts.
You can view individual devices' information such as connected users, data size/speed, login duration, start and inactivity time, authentication type, number of connections, etc.
Solution
The main section can display:
- The duration of the time with zero data traffic (1). You can set the firewall to logout users automatically after the inactivity exceeds the allowed time.
- The total number of connections from/to the host (2). You can display the details in the Connections tab.
- The IP address of the host from which is the user connecting (3)
- The date and time of the active host' registration in the Kerio Control (4)
- The total size of the data received and transmitted since the Start time (5)
- The current traffic speed for incoming data (Rx) and outgoing data (Tx) (6)
Right-clicking on the Active Hosts item displays a context menu that provides the following options:
|
Option |
Description |
|
View in Users |
This option is available if the user is logged in. Kerio Control redirects you to the Configuration > Users section (the user's account is automatically highlighted) and you can change the details of the account. For example: in the Active Hosts section, you find out that one of the Kerio Control users has a huge download. Click View in Users and you are immediately in the Users section, the user is highlighted and you can set a quota for them. |
|
View in Statistics |
This option is available if the user is logged in. Kerio Control redirects you to the Status > User Statistics section (the user is automatically highlighted) and you can check the user's statistics. For example: in the Active Hosts section, you find out that one of the Kerio Control users has a huge download. Click View in Statistics and you are immediately in the User Statistics section, the user is highlighted and you can check if the user's download is often so high. |
|
Make DHCP reservation by MAC |
If Kerio Control knows the MAC address, you can make a DHCP reservation by MAC. For more information refer to Reserving an IP address. Login user automatically by MAC This option is available if the user is logged in and Kerio Control knows the MAC address of the host. If users work at reserved workstations (i.e. their computers are not used by any other user), they can use automatic login to Kerio Control. Their computers are identified with Media Access Control address (MAC address). |
|
Logout User |
Immediate log out of a selected user from the selected active host or hosts. |
|
Logout All Users |
Immediate log out of all firewall users. |
The Active Hosts section provides detailed information on a selected host and connected user in. If you cannot see the details, click the Show details button.
General
Open the General tab to view and copy&paste information on the user's login, size/speed of transmitted data, and information on the activities of the user.
Host information
|
Option |
Description |
|
Host |
DNS name (if available) or IPv4 address of the host |
|
User |
Kerio Control username of the user |
|
Login time |
date and time when a user logged-in. |
|
Inactivity time |
time for which no packet is sent |
|
IPv4 address |
IPv4 address of the host |
|
IPv6 address |
IPv6 address of the host |
|
Authentication type |
this is displayed if the host uses an authentication. |
|
MAC address |
the MAC address is displayed if Kerio Control knows the MAC address of the host. |
Traffic information
Information on the size of data received (Download) and sent (Upload) by the particular user (or host) and on the current speed of traffic in both directions.
The Connections item means the number of TCP/UDP connections.
Activity
|
Option |
Description |
|
Active since |
Time (in minutes and seconds) when the activity was detected. |
|
Event Type |
Type of detected activity (network communication). Kerio Control Distinguishes many activities, for example, SMTP, POP3, WWW (HTTP traffic), FTP, Streams (real-time transmission of audio and video streams), VPN, etc. |
|
Description |
Detailed information on the activity. For example: WWW — the title of a Web page to which the user is connected (if no title is available, URL will be displayed instead). For better transparency, only the first visited page of each web server, to which the user connected, is displayed. FTP — DNS name or IP address of the server, size of downloaded/saved data, information on currently downloaded/saved file (name of the file including the path, size of data downloaded/uploaded from/to this file). P2P — information that the client is probably using the Peer-To-Peer network. |
Connections
The Connections tab displays all active connections to the Internet. Information about each connection includes the processed traffic rule, transfer rate, protocol, outgoing interface, remote host, and more.
Use the Show DNS names option to enable/disable showing of DNS names instead of IP addresses in the Source and Destination columns. If a DNS name for an IP address cannot be resolved, the IP address is displayed.
Note: To kill a connection between the LAN and the Internet immediately, right-click the connection and select Kill connection.
The selected host's overview of connections lists only connections established from the particular host to the Internet and vice versa. Local connections established between the particular host and the firewall can be viewed only in Status > Connections. Connections between hosts within the LAN are not routed through Kerio Control and, therefore, they cannot be viewed there.
Histogram
The Histogram tab provides information on data volume transferred from and to the selected host in a selected time period. The chart provides information on a load of this host's traffic on the Internet line through the day.
