{ "meta": { "capturedAt": "2026-07-25T22:57:44.702Z", "purpose": "evidencia-fortigate", "serial": "FGT70GTK26011782", "model": "FortiGate 70G" }, "overview": { "ok": true, "host": "177.206.110.120:8443", "capturedAt": "2026-07-25T22:57:45.238Z", "serial": "FGT70GTK26011782", "version": "v7.4.12", "model": "70G", "hostname": "FortiGate-Casa", "logDisk": "not_available", "license": { "fortiguard": true, "antivirus": "licensed", "ips": "licensed", "webfilter": "licensed", "appctrl": "licensed", "antispam": "licensed", "outbreak": "licensed", "forticloudLogging": "free_license", "expires": 1815955200 }, "resource": { "cpu": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "mem": [ { "current": 42, "historical": { "1-min": { "values": [ [ 1785020307000, 42 ], [ 1785020304000, 42 ], [ 1785020301000, 42 ], [ 1785020298000, 42 ], [ 1785020295000, 42 ], [ 1785020292000, 42 ], [ 1785020289000, 42 ], [ 1785020286000, 42 ], [ 1785020283000, 42 ], [ 1785020280000, 42 ], [ 1785020277000, 42 ], [ 1785020274000, 42 ], [ 1785020271000, 42 ], [ 1785020268000, 42 ], [ 1785020265000, 42 ], [ 1785020262000, 42 ], [ 1785020259000, 42 ], [ 1785020256000, 42 ], [ 1785020253000, 42 ], [ 1785020250000, 42 ] ], "max": 42, "min": 42, "average": 42, "start": 1785020250000, "end": 1785020307000 } } } ], "disk": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "session": [ { "current": 185, "historical": { "1-min": { "values": [ [ 1785020307000, 185 ], [ 1785020304000, 186 ], [ 1785020301000, 190 ], [ 1785020298000, 191 ], [ 1785020295000, 193 ], [ 1785020292000, 190 ], [ 1785020289000, 188 ], [ 1785020286000, 185 ], [ 1785020283000, 185 ], [ 1785020280000, 183 ], [ 1785020277000, 190 ], [ 1785020274000, 190 ], [ 1785020271000, 189 ], [ 1785020268000, 193 ], [ 1785020265000, 204 ], [ 1785020262000, 211 ], [ 1785020259000, 213 ], [ 1785020256000, 219 ], [ 1785020253000, 226 ], [ 1785020250000, 229 ] ], "max": 229, "min": 183, "average": 197, "start": 1785020250000, "end": 1785020307000 } } } ], "session6": [ { "current": 4, "historical": { "1-min": { "values": [ [ 1785020307000, 4 ], [ 1785020304000, 4 ], [ 1785020301000, 3 ], [ 1785020298000, 3 ], [ 1785020295000, 2 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 4, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "setuprate": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 1 ], [ 1785020301000, 0 ], [ 1785020298000, 1 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 2 ], [ 1785020283000, 3 ], [ 1785020280000, 0 ], [ 1785020277000, 1 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 12 ], [ 1785020265000, 3 ], [ 1785020262000, 0 ], [ 1785020259000, 2 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 4 ] ], "max": 12, "min": 0, "average": 1, "start": 1785020250000, "end": 1785020307000 } } } ], "setuprate6": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "npu_session": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "npu_session6": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "nturbo_session": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "nturbo_session6": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "disk_lograte": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "faz_lograte": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ], "forticloud_lograte": [ { "current": 2, "historical": { "1-min": { "values": [ [ 1785020307000, 2 ], [ 1785020304000, 2 ], [ 1785020301000, 3 ], [ 1785020298000, 1 ], [ 1785020295000, 17 ], [ 1785020292000, 5 ], [ 1785020289000, 3 ], [ 1785020286000, 9 ], [ 1785020283000, 3 ], [ 1785020280000, 6 ], [ 1785020277000, 4 ], [ 1785020274000, 3 ], [ 1785020271000, 10 ], [ 1785020268000, 9 ], [ 1785020265000, 4 ], [ 1785020262000, 2 ], [ 1785020259000, 6 ], [ 1785020256000, 9 ], [ 1785020253000, 2 ], [ 1785020250000, 2 ] ], "max": 17, "min": 1, "average": 5, "start": 1785020250000, "end": 1785020307000 } } } ], "faz_cloud_lograte": [ { "current": 0, "historical": { "1-min": { "values": [ [ 1785020307000, 0 ], [ 1785020304000, 0 ], [ 1785020301000, 0 ], [ 1785020298000, 0 ], [ 1785020295000, 0 ], [ 1785020292000, 0 ], [ 1785020289000, 0 ], [ 1785020286000, 0 ], [ 1785020283000, 0 ], [ 1785020280000, 0 ], [ 1785020277000, 0 ], [ 1785020274000, 0 ], [ 1785020271000, 0 ], [ 1785020268000, 0 ], [ 1785020265000, 0 ], [ 1785020262000, 0 ], [ 1785020259000, 0 ], [ 1785020256000, 0 ], [ 1785020253000, 0 ], [ 1785020250000, 0 ] ], "max": 0, "min": 0, "average": 0, "start": 1785020250000, "end": 1785020307000 } } } ] }, "performance": { "cpu": { "cores": [ { "user": 0, "system": 0, "nice": 0, "idle": 100, "iowait": 0 }, { "user": 0, "system": 0, "nice": 0, "idle": 100, "iowait": 0 }, { "user": 0, "system": 0, "nice": 0, "idle": 100, "iowait": 0 }, { "user": 0, "system": 0, "nice": 0, "idle": 100, "iowait": 0 } ], "user": 0, "system": 0, "nice": 0, "idle": 100, "iowait": 0 }, "mem": { "total": 3888406528, "used": 1638768640, "free": 1864941568, "freeable": 384696320 } }, "interfaces": { "wan1": { "id": "wan1", "name": "wan1", "alias": "(Vivo-PPPoE)", "mac": "1c:d1:1a:38:17:42", "ip": "177.206.110.120", "mask": 32, "link": true, "speed": 1000, "duplex": 1, "tx_packets": 59471005, "rx_packets": 119846895, "tx_bytes": 46008021486, "rx_bytes": 149879164263, "tx_errors": 0, "rx_errors": 0 }, "wan2": { "id": "wan2", "name": "wan2", "alias": "", "mac": "1c:d1:1a:38:17:43", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 0, "rx_packets": 0, "tx_bytes": 0, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "port1": { "id": "port1", "name": "port1", "alias": "", "mac": "1c:d1:1a:38:17:44", "ip": "0.0.0.0", "mask": 0, "link": true, "speed": 1000, "duplex": 1, "tx_packets": 116460750, "rx_packets": 58345958, "tx_bytes": 146213412783, "rx_bytes": 45507412749, "tx_errors": 0, "rx_errors": 0 }, "port2": { "id": "port2", "name": "port2", "alias": "", "mac": "1c:d1:1a:38:17:45", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 58, "rx_packets": 0, "tx_bytes": 9284, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "port3": { "id": "port3", "name": "port3", "alias": "", "mac": "1c:d1:1a:38:17:46", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 58, "rx_packets": 0, "tx_bytes": 9284, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "port4": { "id": "port4", "name": "port4", "alias": "", "mac": "1c:d1:1a:38:17:47", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 127, "rx_packets": 0, "tx_bytes": 14148, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "port5": { "id": "port5", "name": "port5", "alias": "", "mac": "1c:d1:1a:38:17:48", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 58, "rx_packets": 0, "tx_bytes": 9284, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "port6": { "id": "port6", "name": "port6", "alias": "", "mac": "1c:d1:1a:38:17:49", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 58, "rx_packets": 0, "tx_bytes": 9284, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "a": { "id": "a", "name": "a", "alias": "", "mac": "1c:d1:1a:38:17:4a", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 0, "rx_packets": 0, "tx_bytes": 0, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "b": { "id": "b", "name": "b", "alias": "", "mac": "1c:d1:1a:38:17:4b", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 0, "rx_packets": 0, "tx_bytes": 0, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "modem": { "id": "modem", "name": "modem", "alias": "", "mac": "00:00:00:00:00:00", "ip": "0.0.0.0", "mask": 0, "link": false, "speed": 0, "duplex": 0, "tx_packets": 0, "rx_packets": 0, "tx_bytes": 0, "rx_bytes": 0, "tx_errors": 0, "rx_errors": 0 }, "vlan50": { "id": "vlan50", "name": "vlan50", "alias": "(IoT-Impressoras)", "mac": "00:00:00:00:00:00", "ip": "172.16.50.1", "mask": 24, "link": true, "speed": 0, "duplex": 0, "tx_packets": 21503653, "rx_packets": 4962130, "tx_bytes": 31672345499, "rx_bytes": 556440194, "tx_errors": 0, "rx_errors": 0, "vlanid": 50, "interface": "lan" }, "vlan100": { "id": "vlan100", "name": "vlan100", "alias": "(Convidados)", "mac": "00:00:00:00:00:00", "ip": "192.168.100.1", "mask": 24, "link": true, "speed": 0, "duplex": 0, "tx_packets": 10648305, "rx_packets": 6030766, "tx_bytes": 12605452956, "rx_bytes": 4549080355, "tx_errors": 0, "rx_errors": 0, "vlanid": 100, "interface": "lan" } }, "syslog": { "status": "enable", "server": "192.168.1.227", "mode": "udp", "port": 514, "facility": "local7", "source-ip": "", "format": "default", "priority": "low", "max-log-rate": 0, "enc-algorithm": "disable", "ssl-min-proto-version": "default", "certificate": "", "custom-field-name": [], "syslog-type": 1, "interface-select-method": "auto", "interface": "" }, "snmp": { "status": "enable", "engine-id-type": "text", "engine-id": "", "description": "", "contact-info": "", "location": "", "trap-high-cpu-threshold": 80, "trap-low-memory-threshold": 80, "trap-log-full-threshold": 90, "trap-free-memory-threshold": 5, "trap-freeable-memory-threshold": 60, "append-index": "disable" }, "logSetting": { "resolve-ip": "enable", "resolve-port": "enable", "log-user-in-upper": "disable", "fwpolicy-implicit-log": "enable", "fwpolicy6-implicit-log": "enable", "extended-log": "enable", "local-in-allow": "enable", "local-in-deny-unicast": "enable", "local-in-deny-broadcast": "enable", "local-out": "enable", "local-out-ioc-detection": "enable", "daemon-log": "enable", "neighbor-event": "enable", "brief-traffic-format": "disable", "user-anonymize": "disable", "expolicy-implicit-log": "disable", "log-policy-comment": "enable", "faz-override": "disable", "syslog-override": "disable", "rest-api-set": "enable", "rest-api-get": "enable", "rest-api-performance": "disable", "long-live-session-stat": "enable", "web-svc-perf": "disable", "custom-log-fields": [], "anonymization-hash": "" }, "diskSetting": { "status": "disable", "ips-archive": "enable", "max-log-file-size": 20, "max-policy-packet-capture-size": 100, "roll-schedule": "daily", "roll-day": "sunday", "roll-time": "00:00", "diskfull": "overwrite", "log-quota": 0, "dlp-archive-quota": 0, "maximum-log-age": 7, "upload": "disable", "upload-destination": "ftp-server", "uploadip": "0.0.0.0", "uploadport": 21, "source-ip": "0.0.0.0", "uploaduser": "", "uploadpass": "", "uploaddir": "", "uploadtype": "traffic event virus webfilter IPS emailfilter dlp-archive anomaly voip dlp app-ctrl waf dns ssh ssl", "uploadsched": "disable", "uploadtime": "00:00", "upload-delete-files": "enable", "upload-ssl-conn": "default", "full-first-warning-threshold": 75, "full-second-warning-threshold": 90, "full-final-warning-threshold": 95, "interface-select-method": "auto", "interface": "" }, "ha": [], "error": null }, "policies": [ { "id": 9, "name": "crm-block-internet", "status": "enable", "action": "deny", "srcintf": [ "lan", "vlan50", "vlan100" ], "dstintf": [ "wan1" ], "srcaddr": [ "CRM-Blocked" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "enable", "comments": "Bloqueio internet — CRM Casa" }, { "id": 1, "name": "lan-to-wan", "status": "enable", "action": "accept", "srcintf": [ "lan" ], "dstintf": [ "wan1" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "enable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 14, "name": "alexa-to-wan-clean", "status": "enable", "action": "accept", "srcintf": [ "vlan50" ], "dstintf": [ "wan1" ], "srcaddr": [ "Alexa-Casa" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "enable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "enable", "comments": "Alexa voz Amazon ? sem SSL inspect / webfilter / IPS" }, { "id": 2, "name": "vlan50-to-wan", "status": "enable", "action": "accept", "srcintf": [ "vlan50" ], "dstintf": [ "wan1" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "enable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 3, "name": "vlan100-to-wan", "status": "enable", "action": "accept", "srcintf": [ "vlan100" ], "dstintf": [ "wan1" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "enable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 4, "name": "lan-to-vlan50", "status": "enable", "action": "accept", "srcintf": [ "lan" ], "dstintf": [ "vlan50" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 10, "name": "vlan100-to-portal", "status": "enable", "action": "accept", "srcintf": [ "vlan100" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "CRM-Portal" ], "service": [ "CRM-Portal-8090", "DNS", "PING" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "Guest portal CRM" }, { "id": 5, "name": "vlan100-deny-lan", "status": "enable", "action": "deny", "srcintf": [ "vlan100" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 6, "name": "vlan100-deny-vlan50", "status": "enable", "action": "deny", "srcintf": [ "vlan100" ], "dstintf": [ "vlan50" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 7, "name": "vlan50-deny-lan", "status": "enable", "action": "deny", "srcintf": [ "vlan50" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 8, "name": "wan-to-crm", "status": "enable", "action": "accept", "srcintf": [ "wan1" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "VIP-CRM-HTTPS", "VIP-CRM-HTTP" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 11, "name": "wan-to-crm-casa", "status": "enable", "action": "accept", "srcintf": [ "wan1" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "CRM-CASA-VIP", "CRM-CASA-VIP-80" ], "service": [ "HTTPS", "HTTP" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 12, "name": "CRM-IPSEC-to-LAN", "status": "enable", "action": "accept", "srcintf": [ "CRM-IPSEC" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "CRM-LAN-HOME" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "Acesso remoto IPsec -> LAN (FortiGate/CRM)" }, { "id": 13, "name": "CRM-IPSEC-to-IoT", "status": "enable", "action": "accept", "srcintf": [ "CRM-IPSEC" ], "dstintf": [ "vlan50" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "Acesso remoto IPsec -> VLAN50 IoT" }, { "id": 15, "name": "CRM-IPSEC-to-WAN", "status": "enable", "action": "accept", "srcintf": [ "CRM-IPSEC" ], "dstintf": [ "wan1" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "enable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "Internet via IPsec para clientes VPN" }, { "id": 16, "name": "CRM-IPSEC-UDP-to-LAN", "status": "enable", "action": "accept", "srcintf": [ "CRM-IPSEC-UDP" ], "dstintf": [ "lan" ], "srcaddr": [ "all" ], "dstaddr": [ "CRM-LAN-HOME" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 17, "name": "CRM-IPSEC-UDP-to-IoT", "status": "enable", "action": "accept", "srcintf": [ "CRM-IPSEC-UDP" ], "dstintf": [ "vlan50" ], "srcaddr": [ "all" ], "dstaddr": [ "all" ], "service": [ "ALL" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 18, "name": "wan-to-crm-ssh", "status": "enable", "action": "accept", "srcintf": [ "wan1" ], "dstintf": [ "lan" ], "srcaddr": [ "CRM-Admin-Temp" ], "dstaddr": [ "VIP-CRM-SSH" ], "service": [ "SSH" ], "nat": "disable", "utm": "enable", "av": "default", "ips": "high_security", "webfilter": "default", "app": "block-high-risk", "dns": "default", "ssl": "certificate-inspection", "log": "all", "logStart": "enable", "comments": "" }, { "id": 19, "name": "wan-to-udr-temp-https", "status": "enable", "action": "accept", "srcintf": [ "wan1" ], "dstintf": [ "lan" ], "srcaddr": [ "TEMP-UDR-Admin-IP" ], "dstaddr": [ "TEMP-UDR-HTTPS-9444" ], "service": [ "ALL" ], "nat": "disable", "utm": "disable", "av": "", "ips": "", "webfilter": "", "app": "", "dns": "", "ssl": "no-inspection", "log": "all", "logStart": "disable", "comments": "TEMP UDR access — remove after Mauro finishes" } ], "sessions": { "size": 83, "sessions": [ { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51070, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.31.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United Kingdom", "country_id": 16967, "snaddr": "177.206.110.120", "snport": 51070, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 2815, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 2632451, "rcvdbyte": 970309, "tx_packets": 2640, "rx_packets": 2426, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 59394, "dstintf": "wan1", "daddr": "18.236.13.1", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 59394, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "1", "duration": 24, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 12893, "rcvdbyte": 6739, "tx_packets": 39, "rx_packets": 37, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 54654, "dstintf": "wan1", "daddr": "54.188.216.226", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 54654, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3045", "duration": 575, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 7204, "rcvdbyte": 4391, "tx_packets": 15, "rx_packets": 11, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "icmp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 9219, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 8, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 9219, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "29", "duration": 32, "apps": [ { "id": 24466 } ], "app_list_id": 2004, "sentbyte": 252, "rcvdbyte": 252, "tx_packets": 3, "rx_packets": 3, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51066, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.86.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 51066, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 2815, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 936228, "rcvdbyte": 271064, "tx_packets": 1158, "rx_packets": 1153, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "wan1", "saddr": "179.94.69.75", "sport": 61958, "dstintf": "lan", "daddr": "177.206.110.120", "dport": 9444, "src_uuid": "13233232-8871-51f1-6f48-9c9d8b2fd703", "src_uuid_type": "firewall.address", "dst_uuid": "13286036-8871-51f1-4870-28a0d79fac08", "dst_uuid_type": "firewall.vip", "country": "Brazil", "country_id": 21058, "dnaddr": "192.168.1.2", "dnport": 443, "policyid": 19, "policytype": "policy", "vf": "root", "expiry": "3597", "duration": 527, "apps": [ { "id": 0, "name": "tcp/9444", "protocol": 6, "protocol_str": "tcp", "port": 9444 } ], "app_list_id": 0, "sentbyte": 10243, "rcvdbyte": 365667, "tx_packets": 215, "rx_packets": 376, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.111", "sport": 48168, "dstintf": "wan1", "daddr": "201.0.230.236", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 48168, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3592", "duration": 186, "apps": [ { "id": 31077 } ], "app_list_id": 2004, "sentbyte": 2923735, "rcvdbyte": 335576247, "tx_packets": 54408, "rx_packets": 231968, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 57880, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 57880, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "19", "duration": 160, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 169, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 54752, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 54752, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "115", "duration": 64, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 53172, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 53172, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "164", "duration": 15, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 75, "rcvdbyte": 91, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 56148, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 56148, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "22", "duration": 157, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 71, "rcvdbyte": 103, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 41472, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 41472, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "17", "duration": 162, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 215, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.51", "sport": 41544, "srcmac": "8c:30:66:6c:b0:e0", "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 41544, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 163298, "apps": [ { "id": 0, "name": "udp/53", "protocol": 17, "protocol_str": "udp", "port": 53 } ], "app_list_id": 2004, "sentbyte": 4759728, "rcvdbyte": 11757690, "tx_packets": 93328, "rx_packets": 93315, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 33384, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 33384, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "115", "duration": 64, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 34156, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 34156, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "13", "duration": 166, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 48788, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 48788, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "78", "duration": 101, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 199, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 41996, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 41996, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "115", "duration": 64, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 43100, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 43100, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "126", "duration": 53, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 75, "rcvdbyte": 127, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 43696, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 43696, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "165", "duration": 14, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 44920, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 44920, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "23", "duration": 156, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 57, "rcvdbyte": 109, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.111", "sport": 39442, "dstintf": "wan1", "daddr": "142.251.135.225", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 39442, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3574", "duration": 693, "apps": [ { "id": 31077 } ], "app_list_id": 2004, "sentbyte": 4905, "rcvdbyte": 42329, "tx_packets": 50, "rx_packets": 69, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.3", "sport": 38668, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 38668, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "108", "duration": 71, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 54768, "dstintf": "wan1", "daddr": "34.223.238.41", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 54768, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 64, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 47504, "rcvdbyte": 14740, "tx_packets": 126, "rx_packets": 99, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.53", "sport": 40496, "srcmac": "8c:30:66:c8:a1:82", "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 40496, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "178", "duration": 163299, "apps": [ { "id": 0, "name": "udp/53", "protocol": 17, "protocol_str": "udp", "port": 53 } ], "app_list_id": 2004, "sentbyte": 4237039, "rcvdbyte": 10466208, "tx_packets": 83079, "rx_packets": 83066, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51111, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.31.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United Kingdom", "country_id": 16967, "snaddr": "177.206.110.120", "snport": 51111, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3598", "duration": 2799, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 46360, "rcvdbyte": 145297, "tx_packets": 653, "rx_packets": 640, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 54155, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.86.33", "dport": 54035, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 54155, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 1385, "apps": [ { "id": 0, "name": "udp/54035", "protocol": 17, "protocol_str": "udp", "port": 54035 } ], "app_list_id": 2004, "sentbyte": 11900397, "rcvdbyte": 17778028, "tx_packets": 88878, "rx_packets": 92545, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 55889, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "13.224.252.95", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 55889, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3597", "duration": 2815, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 151545, "rcvdbyte": 173048, "tx_packets": 595, "rx_packets": 880, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51067, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.86.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 51067, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3595", "duration": 2815, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 2798410, "rcvdbyte": 315992, "tx_packets": 2484, "rx_packets": 2213, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 50835, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 50835, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "35", "duration": 144, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 53215, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 53215, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "103", "duration": 76, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 56067, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 56067, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "140", "duration": 39, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 37523, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 37523, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "70", "duration": 109, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 40483, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 40483, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "115", "duration": 64, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 42515, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 42515, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "6", "duration": 173, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 75, "rcvdbyte": 127, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 44243, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 44243, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "163", "duration": 16, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 44683, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 44683, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "85", "duration": 94, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 57, "rcvdbyte": 109, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 38493, "dstintf": "wan1", "daddr": "74.125.250.129", "dport": 19302, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 38493, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "170", "duration": 529, "apps": [ { "id": 37402 } ], "app_list_id": 2004, "sentbyte": 2544, "rcvdbyte": 3180, "tx_packets": 53, "rx_packets": 53, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 34764, "dstintf": "wan1", "daddr": "32.185.77.204", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 34764, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "0", "duration": 14, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 5924, "rcvdbyte": 4897, "tx_packets": 21, "rx_packets": 20, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 42248, "dstintf": "wan1", "daddr": "198.41.200.53", "dport": 7844, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 42248, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 163297, "apps": [ { "id": 0, "name": "udp/7844", "protocol": 17, "protocol_str": "udp", "port": 7844 } ], "app_list_id": 2004, "sentbyte": 10123871565, "rcvdbyte": 115481002, "tx_packets": 8230662, "rx_packets": 1816287, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 38493, "dstintf": "wan1", "daddr": "179.94.69.75", "dport": 56587, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 38493, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 529, "apps": [ { "id": 16573 } ], "app_list_id": 2004, "sentbyte": 1395637, "rcvdbyte": 47134, "tx_packets": 1521, "rx_packets": 444, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.116", "sport": 54792, "dstintf": "wan1", "daddr": "173.245.211.41", "dport": 56820, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 54792, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "53", "duration": 127, "apps": [ { "id": 0, "name": "udp/56820", "protocol": 17, "protocol_str": "udp", "port": 56820 } ], "app_list_id": 2004, "sentbyte": 716, "rcvdbyte": 1548, "tx_packets": 6, "rx_packets": 4, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 59812, "dstintf": "wan1", "daddr": "18.236.13.1", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 59812, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "0", "duration": 14, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 9208, "rcvdbyte": 5585, "tx_packets": 26, "rx_packets": 24, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51279, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "108.138.14.25", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 51279, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3546", "duration": 53, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 4903, "rcvdbyte": 7317, "tx_packets": 13, "rx_packets": 12, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51068, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.86.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 51068, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3591", "duration": 2815, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 1174293, "rcvdbyte": 152943, "tx_packets": 1067, "rx_packets": 965, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "wan1", "saddr": "179.94.69.75", "sport": 61956, "dstintf": "lan", "daddr": "177.206.110.120", "dport": 9444, "src_uuid": "13233232-8871-51f1-6f48-9c9d8b2fd703", "src_uuid_type": "firewall.address", "dst_uuid": "13286036-8871-51f1-4870-28a0d79fac08", "dst_uuid_type": "firewall.vip", "country": "Brazil", "country_id": 21058, "dnaddr": "192.168.1.2", "dnport": 443, "policyid": 19, "policytype": "policy", "vf": "root", "expiry": "3547", "duration": 529, "apps": [ { "id": 0, "name": "tcp/9444", "protocol": 6, "protocol_str": "tcp", "port": 9444 } ], "app_list_id": 0, "sentbyte": 2253, "rcvdbyte": 39647, "tx_packets": 19, "rx_packets": 37, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 51530, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 51530, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "164", "duration": 15, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 52486, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 52486, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "155", "duration": 24, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 52890, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 52890, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "165", "duration": 14, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.111", "sport": 57028, "dstintf": "wan1", "daddr": "142.251.155.4", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 57028, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3592", "duration": 521, "apps": [ { "id": 31077 } ], "app_list_id": 2004, "sentbyte": 261834, "rcvdbyte": 131297, "tx_packets": 572, "rx_packets": 655, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 58810, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 58810, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "165", "duration": 14, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 51470, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 51470, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "21", "duration": 158, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 67, "rcvdbyte": 83, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 56790, "dstintf": "wan1", "daddr": "100.23.47.229", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 56790, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 99, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 70086, "rcvdbyte": 20252, "tx_packets": 184, "rx_packets": 145, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 54770, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 54770, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "17", "duration": 162, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 169, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 34202, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 34202, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "35", "duration": 144, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 42198, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 42198, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "155", "duration": 24, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 36082, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 36082, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "78", "duration": 101, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 169, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 55883, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 55883, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3546", "duration": 2856, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 66928, "rcvdbyte": 172012, "tx_packets": 437, "rx_packets": 514, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 47526, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 47526, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "66", "duration": 113, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 75, "rcvdbyte": 127, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 38493, "dstintf": "wan1", "daddr": "177.71.206.251", "dport": 3478, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 38493, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "170", "duration": 529, "apps": [ { "id": 16573 } ], "app_list_id": 2004, "sentbyte": 2544, "rcvdbyte": 5088, "tx_packets": 53, "rx_packets": 53, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 38493, "dstintf": "wan1", "daddr": "162.159.207.0", "dport": 3478, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 38493, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "170", "duration": 529, "apps": [ { "id": 16573 } ], "app_list_id": 2004, "sentbyte": 2544, "rcvdbyte": 3180, "tx_packets": 53, "rx_packets": 53, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.120", "sport": 55501, "dstintf": "wan1", "daddr": "17.249.252.4", "dport": 5223, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 55501, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3072", "duration": 538, "apps": [ { "id": 41540 } ], "app_list_id": 2004, "sentbyte": 19575, "rcvdbyte": 6108, "tx_packets": 29, "rx_packets": 20, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 50960, "dstintf": "wan1", "daddr": "44.227.122.21", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 50960, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 14, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 9339, "rcvdbyte": 5509, "tx_packets": 28, "rx_packets": 23, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 58782, "dstintf": "wan1", "daddr": "34.215.88.151", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 58782, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3599", "duration": 24, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 16403, "rcvdbyte": 6992, "tx_packets": 43, "rx_packets": 37, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 51277, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.21.3", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Netherlands", "country_id": 19534, "snaddr": "177.206.110.120", "snport": 51277, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3571", "duration": 192, "apps": [ { "id": 40568 } ], "app_list_id": 2004, "sentbyte": 19189, "rcvdbyte": 11422, "tx_packets": 28, "rx_packets": 28, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.51", "sport": 47578, "srcmac": "8c:30:66:6c:b0:e0", "dstintf": "wan1", "daddr": "8.8.8.8", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 47578, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "178", "duration": 163298, "apps": [ { "id": 0, "name": "udp/53", "protocol": 17, "protocol_str": "udp", "port": 53 } ], "app_list_id": 2004, "sentbyte": 4759845, "rcvdbyte": 11759016, "tx_packets": 93330, "rx_packets": 93328, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 62701, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "128.116.86.33", "dport": 49211, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 62701, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 1385, "apps": [ { "id": 0, "name": "udp/49211", "protocol": 17, "protocol_str": "udp", "port": 49211 } ], "app_list_id": 2004, "sentbyte": 503181, "rcvdbyte": 332951, "tx_packets": 3433, "rx_packets": 2019, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 47982, "dstintf": "wan1", "daddr": "44.250.91.183", "dport": 8883, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 47982, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3598", "duration": 1011, "apps": [ { "id": 41540 } ], "app_list_id": 2004, "sentbyte": 83845, "rcvdbyte": 12408, "tx_packets": 134, "rx_packets": 92, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "wan1", "saddr": "179.94.69.75", "sport": 61955, "dstintf": "lan", "daddr": "177.206.110.120", "dport": 9444, "src_uuid": "13233232-8871-51f1-6f48-9c9d8b2fd703", "src_uuid_type": "firewall.address", "dst_uuid": "13286036-8871-51f1-4870-28a0d79fac08", "dst_uuid_type": "firewall.vip", "country": "Brazil", "country_id": 21058, "dnaddr": "192.168.1.2", "dnport": 443, "policyid": 19, "policytype": "policy", "vf": "root", "expiry": "3598", "duration": 529, "apps": [ { "id": 0, "name": "tcp/9444", "protocol": 6, "protocol_str": "tcp", "port": 9444 } ], "app_list_id": 0, "sentbyte": 55020, "rcvdbyte": 8026040, "tx_packets": 1338, "rx_packets": 5793, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.111", "sport": 55018, "dstintf": "wan1", "daddr": "142.250.219.246", "dport": 443, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Brazil", "country_id": 21058, "snaddr": "177.206.110.120", "snport": 55018, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3572", "duration": 572, "apps": [ { "id": 31077 } ], "app_list_id": 2004, "sentbyte": 12951, "rcvdbyte": 547488, "tx_packets": 172, "rx_packets": 429, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.53", "sport": 49554, "srcmac": "8c:30:66:c8:a1:82", "dstintf": "wan1", "daddr": "8.8.8.8", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 49554, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "179", "duration": 163299, "apps": [ { "id": 0, "name": "udp/53", "protocol": 17, "protocol_str": "udp", "port": 53 } ], "app_list_id": 2004, "sentbyte": 4236677, "rcvdbyte": 10466868, "tx_packets": 83072, "rx_packets": 83072, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 55953, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 55953, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "115", "duration": 64, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 56829, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 56829, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "13", "duration": 166, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 48893, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 48893, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "20", "duration": 159, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 169, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 59673, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 59673, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "5", "duration": 174, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan50", "saddr": "172.16.50.102", "sport": 61751, "srcmac": "98:2a:0a:d2:cf:24", "dstintf": "wan1", "daddr": "47.253.112.91", "dport": 10080, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 61751, "policyid": 2, "policytype": "policy", "vf": "root", "expiry": "3553", "duration": 163296, "apps": [ { "id": 0, "name": "tcp/10080", "protocol": 6, "protocol_str": "tcp", "port": 10080 } ], "app_list_id": 2004, "sentbyte": 2697182, "rcvdbyte": 2106067, "tx_packets": 16893, "rx_packets": 9719, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.121", "sport": 56926, "dstintf": "wan1", "daddr": "64.233.186.188", "dport": 5228, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Chile", "country_id": 19523, "snaddr": "177.206.110.120", "snport": 56926, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3087", "duration": 18143, "apps": [ { "id": 0, "name": "tcp/5228", "protocol": 6, "protocol_str": "tcp", "port": 5228 } ], "app_list_id": 2004, "sentbyte": 4842, "rcvdbyte": 21442, "tx_packets": 61, "rx_packets": 60, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 34577, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 34577, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "80", "duration": 99, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 34333, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 34333, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "147", "duration": 32, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 57, "rcvdbyte": 109, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "vlan100", "saddr": "192.168.100.105", "sport": 55552, "srcmac": "52:be:9f:dc:5e:ac", "dstintf": "wan1", "daddr": "17.249.252.4", "dport": 5223, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 55552, "policyid": 3, "policytype": "policy", "vf": "root", "expiry": "3394", "duration": 11911, "apps": [ { "id": 41540 } ], "app_list_id": 2004, "sentbyte": 330256, "rcvdbyte": 124884, "tx_packets": 788, "rx_packets": 648, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 43705, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 43705, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "17", "duration": 162, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 87, "rcvdbyte": 169, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.2", "sport": 39133, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 39133, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "58", "duration": 121, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 124, "rcvdbyte": 476, "tx_packets": 2, "rx_packets": 2, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "udp", "srcintf": "lan", "saddr": "192.168.1.227", "sport": 38489, "dstintf": "wan1", "daddr": "1.1.1.1", "dport": 53, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "Australia", "country_id": 21825, "snaddr": "177.206.110.120", "snport": 38489, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "21", "duration": 158, "apps": [ { "id": 16195 } ], "app_list_id": 2004, "sentbyte": 83, "rcvdbyte": 143, "tx_packets": 1, "rx_packets": 1, "tx_shaper_drops": 0, "rx_shaper_drops": 0 }, { "type": "ipv4", "proto": "tcp", "srcintf": "lan", "saddr": "192.168.1.118", "sport": 50060, "dstintf": "wan1", "daddr": "17.249.252.4", "dport": 5223, "src_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "src_uuid_type": "firewall.address", "dst_uuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dst_uuid_type": "firewall.address", "country": "United States", "country_id": 21333, "snaddr": "177.206.110.120", "snport": 50060, "policyid": 1, "policytype": "policy", "vf": "root", "expiry": "3167", "duration": 94293, "apps": [ { "id": 0, "name": "tcp/5223", "protocol": 6, "protocol_str": "tcp", "port": 5223 } ], "app_list_id": 2004, "sentbyte": 1172867, "rcvdbyte": 925995, "tx_packets": 2669, "rx_packets": 2515, "tx_shaper_drops": 0, "rx_shaper_drops": 0 } ] }, "vpn": { "ipsec": [ { "proxyid": [], "name": "CRM-IPSEC", "comments": "psk-reset-20260725", "wizard-type": "custom", "type": "", "incoming_bytes": 0, "outgoing_bytes": 0, "rgwy": "0.0.0.0", "tun_id": "10.0.0.1", "tun_id6": "::10.0.0.1" }, { "proxyid": [], "name": "CRM-IPSEC-UDP", "comments": "UDP dialup for Windows/native clients - Mauro", "wizard-type": "custom", "type": "", "incoming_bytes": 0, "outgoing_bytes": 0, "rgwy": "0.0.0.0", "tun_id": "10.0.0.2", "tun_id6": "::10.0.0.2" } ], "users": [] }, "profiles": { "antivirus": [ "default", "sniffer-profile", "wifi-default" ], "ips": [ "all_default", "all_default_pass", "default", "high_security", "protect_client", "protect_email_server", "protect_http_server", "sniffer-profile", "wifi-default" ], "application": [ "block-high-risk", "default", "sniffer-profile", "wifi-default" ], "webfilter": [ "default", "monitor-all", "sniffer-profile", "wifi-default" ], "dnsfilter": [ "default" ], "sslSsh": [ "certificate-inspection", "crm-cert-inspect", "custom-deep-inspection", "deep-inspection", "no-inspection" ] }, "objects": { "addresses": [ { "name": "Alexa-Casa", "q_origin_key": "Alexa-Casa", "subnet": "172.16.50.101 255.255.255.255", "type": "ipmask", "comment": "Echo Alexa-Casa VLAN50 ? bypass UTM" }, { "name": "CRM-Admin-Temp", "q_origin_key": "CRM-Admin-Temp", "subnet": "179.94.69.75 255.255.255.255", "type": "ipmask", "comment": "temp SSH deploy CRM" }, { "name": "CRM-CASA-FQDN", "q_origin_key": "CRM-CASA-FQDN", "type": "fqdn", "comment": "" }, { "name": "CRM-DEV-cc2293c2825a", "q_origin_key": "CRM-DEV-cc2293c2825a", "subnet": "172.16.50.101 255.255.255.255", "type": "ipmask", "comment": "CRM block cc:22:93:c2:82:5a" }, { "name": "CRM-DEV-f2551584207d", "q_origin_key": "CRM-DEV-f2551584207d", "subnet": "192.168.1.109 255.255.255.255", "type": "ipmask", "comment": "CRM block f2:55:15:84:20:7d" }, { "name": "CRM-LAN-HOME", "q_origin_key": "CRM-LAN-HOME", "subnet": "192.168.1.0 255.255.255.0", "type": "ipmask", "comment": "LAN HOME-A — CRM SSL-VPN" }, { "name": "CRM-Portal", "q_origin_key": "CRM-Portal", "subnet": "192.168.1.227 255.255.255.255", "type": "ipmask", "comment": "CRM captive portal" }, { "name": "CRM-TEST-PLACEHOLDER", "q_origin_key": "CRM-TEST-PLACEHOLDER", "subnet": "192.168.1.254 255.255.255.255", "type": "ipmask", "comment": "CRM test — pode apagar" }, { "name": "EMS_ALL_UNKNOWN_CLIENTS", "q_origin_key": "EMS_ALL_UNKNOWN_CLIENTS", "type": "dynamic", "comment": "" }, { "name": "EMS_ALL_UNMANAGEABLE_CLIENTS", "q_origin_key": "EMS_ALL_UNMANAGEABLE_CLIENTS", "type": "dynamic", "comment": "" }, { "name": "FABRIC_DEVICE", "q_origin_key": "FABRIC_DEVICE", "subnet": "0.0.0.0 0.0.0.0", "type": "ipmask", "comment": "IPv4 addresses of Fabric Devices." }, { "name": "FCTEMS_ALL_FORTICLOUD_SERVERS", "q_origin_key": "FCTEMS_ALL_FORTICLOUD_SERVERS", "type": "dynamic", "comment": "" }, { "name": "FIREWALL_AUTH_PORTAL_ADDRESS", "q_origin_key": "FIREWALL_AUTH_PORTAL_ADDRESS", "subnet": "0.0.0.0 0.0.0.0", "type": "ipmask", "comment": "" }, { "name": "IPSEC_CRM_RANGE", "q_origin_key": "IPSEC_CRM_RANGE", "type": "iprange", "comment": "IPsec dialup pool Casa Anderson" }, { "name": "IoT-VLAN50", "q_origin_key": "IoT-VLAN50", "subnet": "172.16.50.0 255.255.255.0", "type": "ipmask", "comment": "VLAN50" }, { "name": "LAN-Casa", "q_origin_key": "LAN-Casa", "subnet": "192.168.1.0 255.255.255.0", "type": "ipmask", "comment": "" }, { "name": "SSLVPN_CRM_POOL", "q_origin_key": "SSLVPN_CRM_POOL", "subnet": "10.212.134.0 255.255.255.0", "type": "ipmask", "comment": "SSLVPN tunnel pool" }, { "name": "TEMP-UDR-Admin-IP", "q_origin_key": "TEMP-UDR-Admin-IP", "subnet": "179.94.69.75 255.255.255.255", "type": "ipmask", "comment": "TEMP Mauro access to UDR" }, { "name": "VLAN50-IoT", "q_origin_key": "VLAN50-IoT", "subnet": "172.16.50.0 255.255.255.0", "type": "ipmask", "comment": "" }, { "name": "VLAN100-Convidados", "q_origin_key": "VLAN100-Convidados", "subnet": "192.168.100.0 255.255.255.0", "type": "ipmask", "comment": "" }, { "name": "all", "q_origin_key": "all", "subnet": "0.0.0.0 0.0.0.0", "type": "ipmask", "comment": "" }, { "name": "gmail.com", "q_origin_key": "gmail.com", "type": "fqdn", "comment": "" }, { "name": "lan", "q_origin_key": "lan", "subnet": "192.168.1.0 255.255.255.0", "type": "interface-subnet", "comment": "" }, { "name": "login.microsoft.com", "q_origin_key": "login.microsoft.com", "type": "fqdn", "comment": "" }, { "name": "login.microsoftonline.com", "q_origin_key": "login.microsoftonline.com", "type": "fqdn", "comment": "" }, { "name": "login.windows.net", "q_origin_key": "login.windows.net", "type": "fqdn", "comment": "" }, { "name": "none", "q_origin_key": "none", "subnet": "0.0.0.0 255.255.255.255", "type": "ipmask", "comment": "" }, { "name": "vlan50 address", "q_origin_key": "vlan50 address", "subnet": "172.16.50.0 255.255.255.0", "type": "interface-subnet", "comment": "" }, { "name": "vlan100 address", "q_origin_key": "vlan100 address", "subnet": "192.168.100.0 255.255.255.0", "type": "interface-subnet", "comment": "" }, { "name": "wildcard.dropbox.com", "q_origin_key": "wildcard.dropbox.com", "type": "fqdn", "comment": "" }, { "name": "wildcard.google.com", "q_origin_key": "wildcard.google.com", "type": "fqdn", "comment": "" } ], "groups": [ { "name": "CRM-Blocked", "q_origin_key": "CRM-Blocked", "member": [] }, { "name": "CRM-VPN-SPLIT", "q_origin_key": "CRM-VPN-SPLIT", "member": [ { "name": "CRM-LAN-HOME", "q_origin_key": "CRM-LAN-HOME" }, { "name": "IoT-VLAN50", "q_origin_key": "IoT-VLAN50" } ] }, { "name": "G Suite", "q_origin_key": "G Suite", "member": [ { "name": "gmail.com", "q_origin_key": "gmail.com" }, { "name": "wildcard.google.com", "q_origin_key": "wildcard.google.com" } ] }, { "name": "Microsoft Office 365", "q_origin_key": "Microsoft Office 365", "member": [ { "name": "login.microsoftonline.com", "q_origin_key": "login.microsoftonline.com" }, { "name": "login.microsoft.com", "q_origin_key": "login.microsoft.com" }, { "name": "login.windows.net", "q_origin_key": "login.windows.net" } ] } ], "vips": [ { "name": "VIP-CRM-HTTPS", "q_origin_key": "VIP-CRM-HTTPS", "extip": "0.0.0.0", "mappedip": [ { "range": "192.168.1.227", "q_origin_key": "192.168.1.227" } ], "extintf": "wan1", "extport": "9443", "mappedport": "443" }, { "name": "VIP-CRM-HTTP", "q_origin_key": "VIP-CRM-HTTP", "extip": "0.0.0.0", "mappedip": [ { "range": "192.168.1.227", "q_origin_key": "192.168.1.227" } ], "extintf": "wan1", "extport": "9080", "mappedport": "80" }, { "name": "CRM-CASA-VIP", "q_origin_key": "CRM-CASA-VIP", "extip": "177.206.110.120", "mappedip": [ { "range": "192.168.1.227", "q_origin_key": "192.168.1.227" } ], "extintf": "wan1", "extport": "443", "mappedport": "443" }, { "name": "CRM-CASA-VIP-80", "q_origin_key": "CRM-CASA-VIP-80", "extip": "177.206.110.120", "mappedip": [ { "range": "192.168.1.227", "q_origin_key": "192.168.1.227" } ], "extintf": "wan1", "extport": "80", "mappedport": "80" }, { "name": "VIP-CRM-SSH", "q_origin_key": "VIP-CRM-SSH", "extip": "177.206.110.120", "mappedip": [ { "range": "192.168.1.227", "q_origin_key": "192.168.1.227" } ], "extintf": "wan1", "extport": "2222", "mappedport": "22" }, { "name": "TEMP-UDR-HTTPS-9444", "q_origin_key": "TEMP-UDR-HTTPS-9444", "extip": "177.206.110.120", "mappedip": [ { "range": "192.168.1.2", "q_origin_key": "192.168.1.2" } ], "extintf": "wan1", "extport": "9444", "mappedport": "443" } ], "services": [ { "name": "AFS3", "q_origin_key": "AFS3", "tcp-portrange": "7000-7009", "udp-portrange": "7000-7009" }, { "name": "AH", "q_origin_key": "AH" }, { "name": "ALL", "q_origin_key": "ALL" }, { "name": "ALL_ICMP", "q_origin_key": "ALL_ICMP" }, { "name": "ALL_ICMP6", "q_origin_key": "ALL_ICMP6" }, { "name": "ALL_TCP", "q_origin_key": "ALL_TCP", "tcp-portrange": "1-65535", "udp-portrange": "" }, { "name": "ALL_UDP", "q_origin_key": "ALL_UDP", "tcp-portrange": "", "udp-portrange": "1-65535" }, { "name": "AOL", "q_origin_key": "AOL", "tcp-portrange": "5190-5194", "udp-portrange": "" }, { "name": "BGP", "q_origin_key": "BGP", "tcp-portrange": "179", "udp-portrange": "" }, { "name": "CRM-Portal-8090", "q_origin_key": "CRM-Portal-8090", "tcp-portrange": "8090", "udp-portrange": "" }, { "name": "CRM-WAN-HTTP", "q_origin_key": "CRM-WAN-HTTP", "tcp-portrange": "9080", "udp-portrange": "" }, { "name": "CRM-WAN-HTTPS", "q_origin_key": "CRM-WAN-HTTPS", "tcp-portrange": "9443", "udp-portrange": "" }, { "name": "CVSPSERVER", "q_origin_key": "CVSPSERVER", "tcp-portrange": "2401", "udp-portrange": "2401" }, { "name": "DCE-RPC", "q_origin_key": "DCE-RPC", "tcp-portrange": "135", "udp-portrange": "135" }, { "name": "DHCP", "q_origin_key": "DHCP", "tcp-portrange": "", "udp-portrange": "67-68" }, { "name": "DHCP6", "q_origin_key": "DHCP6", "tcp-portrange": "", "udp-portrange": "546 547" }, { "name": "DNS", "q_origin_key": "DNS", "tcp-portrange": "53", "udp-portrange": "53" }, { "name": "ESP", "q_origin_key": "ESP" }, { "name": "FINGER", "q_origin_key": "FINGER", "tcp-portrange": "79", "udp-portrange": "" }, { "name": "FTP", "q_origin_key": "FTP", "tcp-portrange": "21", "udp-portrange": "" }, { "name": "FTP_GET", "q_origin_key": "FTP_GET", "tcp-portrange": "21", "udp-portrange": "" }, { "name": "FTP_PUT", "q_origin_key": "FTP_PUT", "tcp-portrange": "21", "udp-portrange": "" }, { "name": "GOPHER", "q_origin_key": "GOPHER", "tcp-portrange": "70", "udp-portrange": "" }, { "name": "GRE", "q_origin_key": "GRE" }, { "name": "H323", "q_origin_key": "H323", "tcp-portrange": "1720 1503", "udp-portrange": "1719" }, { "name": "HTTP", "q_origin_key": "HTTP", "tcp-portrange": "80", "udp-portrange": "" }, { "name": "HTTPS", "q_origin_key": "HTTPS", "tcp-portrange": "443", "udp-portrange": "" }, { "name": "IKE", "q_origin_key": "IKE", "tcp-portrange": "", "udp-portrange": "500 4500" }, { "name": "IMAP", "q_origin_key": "IMAP", "tcp-portrange": "143", "udp-portrange": "" }, { "name": "IMAPS", "q_origin_key": "IMAPS", "tcp-portrange": "993", "udp-portrange": "" }, { "name": "INFO_ADDRESS", "q_origin_key": "INFO_ADDRESS" }, { "name": "INFO_REQUEST", "q_origin_key": "INFO_REQUEST" }, { "name": "IRC", "q_origin_key": "IRC", "tcp-portrange": "6660-6669", "udp-portrange": "" }, { "name": "Internet-Locator-Service", "q_origin_key": "Internet-Locator-Service", "tcp-portrange": "389", "udp-portrange": "" }, { "name": "KERBEROS", "q_origin_key": "KERBEROS", "tcp-portrange": "88 464", "udp-portrange": "88 464" }, { "name": "L2TP", "q_origin_key": "L2TP", "tcp-portrange": "1701", "udp-portrange": "1701" }, { "name": "LDAP", "q_origin_key": "LDAP", "tcp-portrange": "389", "udp-portrange": "" }, { "name": "LDAP_UDP", "q_origin_key": "LDAP_UDP", "tcp-portrange": "", "udp-portrange": "389" }, { "name": "MGCP", "q_origin_key": "MGCP", "tcp-portrange": "2428", "udp-portrange": "2427 2727" }, { "name": "MMS", "q_origin_key": "MMS", "tcp-portrange": "1755", "udp-portrange": "1024-5000" }, { "name": "MS-SQL", "q_origin_key": "MS-SQL", "tcp-portrange": "1433 1434", "udp-portrange": "" }, { "name": "MYSQL", "q_origin_key": "MYSQL", "tcp-portrange": "3306", "udp-portrange": "" }, { "name": "NFS", "q_origin_key": "NFS", "tcp-portrange": "111 2049", "udp-portrange": "111 2049" }, { "name": "NNTP", "q_origin_key": "NNTP", "tcp-portrange": "119", "udp-portrange": "" }, { "name": "NONE", "q_origin_key": "NONE", "tcp-portrange": "0", "udp-portrange": "" }, { "name": "NTP", "q_origin_key": "NTP", "tcp-portrange": "123", "udp-portrange": "123" }, { "name": "NetMeeting", "q_origin_key": "NetMeeting", "tcp-portrange": "1720", "udp-portrange": "" }, { "name": "ONC-RPC", "q_origin_key": "ONC-RPC", "tcp-portrange": "111", "udp-portrange": "111" }, { "name": "OSPF", "q_origin_key": "OSPF" }, { "name": "PC-Anywhere", "q_origin_key": "PC-Anywhere", "tcp-portrange": "5631", "udp-portrange": "5632" }, { "name": "PING", "q_origin_key": "PING" }, { "name": "PING6", "q_origin_key": "PING6" }, { "name": "POP3", "q_origin_key": "POP3", "tcp-portrange": "110", "udp-portrange": "" }, { "name": "POP3S", "q_origin_key": "POP3S", "tcp-portrange": "995", "udp-portrange": "" }, { "name": "PPTP", "q_origin_key": "PPTP", "tcp-portrange": "1723", "udp-portrange": "" }, { "name": "QUAKE", "q_origin_key": "QUAKE", "tcp-portrange": "", "udp-portrange": "26000 27000 27910 27960" }, { "name": "RADIUS", "q_origin_key": "RADIUS", "tcp-portrange": "", "udp-portrange": "1812 1813" }, { "name": "RADIUS-OLD", "q_origin_key": "RADIUS-OLD", "tcp-portrange": "", "udp-portrange": "1645 1646" }, { "name": "RAUDIO", "q_origin_key": "RAUDIO", "tcp-portrange": "", "udp-portrange": "7070" }, { "name": "RDP", "q_origin_key": "RDP", "tcp-portrange": "3389", "udp-portrange": "" }, { "name": "REXEC", "q_origin_key": "REXEC", "tcp-portrange": "512", "udp-portrange": "" }, { "name": "RIP", "q_origin_key": "RIP", "tcp-portrange": "", "udp-portrange": "520" }, { "name": "RLOGIN", "q_origin_key": "RLOGIN", "tcp-portrange": "513:512-1023", "udp-portrange": "" }, { "name": "RSH", "q_origin_key": "RSH", "tcp-portrange": "514:512-1023", "udp-portrange": "" }, { "name": "RTSP", "q_origin_key": "RTSP", "tcp-portrange": "554 7070 8554", "udp-portrange": "554" }, { "name": "SAMBA", "q_origin_key": "SAMBA", "tcp-portrange": "139", "udp-portrange": "" }, { "name": "SCCP", "q_origin_key": "SCCP", "tcp-portrange": "2000", "udp-portrange": "" }, { "name": "SIP", "q_origin_key": "SIP", "tcp-portrange": "5060", "udp-portrange": "5060" }, { "name": "SIP-MSNmessenger", "q_origin_key": "SIP-MSNmessenger", "tcp-portrange": "1863", "udp-portrange": "" }, { "name": "SMB", "q_origin_key": "SMB", "tcp-portrange": "445", "udp-portrange": "" }, { "name": "SMTP", "q_origin_key": "SMTP", "tcp-portrange": "25", "udp-portrange": "" }, { "name": "SMTPS", "q_origin_key": "SMTPS", "tcp-portrange": "465", "udp-portrange": "" }, { "name": "SNMP", "q_origin_key": "SNMP", "tcp-portrange": "161-162", "udp-portrange": "161-162" }, { "name": "SOCKS", "q_origin_key": "SOCKS", "tcp-portrange": "1080", "udp-portrange": "1080" }, { "name": "SQUID", "q_origin_key": "SQUID", "tcp-portrange": "3128", "udp-portrange": "" }, { "name": "SSH", "q_origin_key": "SSH", "tcp-portrange": "22", "udp-portrange": "" }, { "name": "SYSLOG", "q_origin_key": "SYSLOG", "tcp-portrange": "", "udp-portrange": "514" }, { "name": "TALK", "q_origin_key": "TALK", "tcp-portrange": "", "udp-portrange": "517-518" }, { "name": "TELNET", "q_origin_key": "TELNET", "tcp-portrange": "23", "udp-portrange": "" }, { "name": "TEMP-TCP-9443", "q_origin_key": "TEMP-TCP-9443", "tcp-portrange": "9444", "udp-portrange": "" }, { "name": "TFTP", "q_origin_key": "TFTP", "tcp-portrange": "", "udp-portrange": "69" }, { "name": "TIMESTAMP", "q_origin_key": "TIMESTAMP" }, { "name": "TRACEROUTE", "q_origin_key": "TRACEROUTE", "tcp-portrange": "", "udp-portrange": "33434-33535" }, { "name": "UUCP", "q_origin_key": "UUCP", "tcp-portrange": "540", "udp-portrange": "" }, { "name": "VDOLIVE", "q_origin_key": "VDOLIVE", "tcp-portrange": "7000-7010", "udp-portrange": "" }, { "name": "VNC", "q_origin_key": "VNC", "tcp-portrange": "5900", "udp-portrange": "" }, { "name": "WAIS", "q_origin_key": "WAIS", "tcp-portrange": "210", "udp-portrange": "" }, { "name": "WINFRAME", "q_origin_key": "WINFRAME", "tcp-portrange": "1494 2598", "udp-portrange": "" }, { "name": "WINS", "q_origin_key": "WINS", "tcp-portrange": "1512", "udp-portrange": "1512" }, { "name": "X-WINDOWS", "q_origin_key": "X-WINDOWS", "tcp-portrange": "6000-6063", "udp-portrange": "" }, { "name": "webproxy", "q_origin_key": "webproxy", "tcp-portrange": "0-65535:0-65535" } ] }, "logCatalog": [ { "type": "traffic", "ok": false, "count": 0, "error": null }, { "type": "event", "ok": false, "count": 0, "error": null }, { "type": "virus", "ok": true, "count": 0, "error": null }, { "type": "webfilter", "ok": true, "count": 5, "error": null }, { "type": "ips", "ok": true, "count": 5, "error": null }, { "type": "app-ctrl", "ok": true, "count": 5, "error": null }, { "type": "dns", "ok": true, "count": 5, "error": null }, { "type": "ssh", "ok": true, "count": 0, "error": null }, { "type": "ssl", "ok": true, "count": 5, "error": null }, { "type": "emailfilter", "ok": true, "count": 0, "error": null }, { "type": "anomaly", "ok": true, "count": 0, "error": null }, { "type": "voip", "ok": true, "count": 0, "error": null }, { "type": "dlp", "ok": true, "count": 0, "error": null }, { "type": "waf", "ok": true, "count": 0, "error": null }, { "type": "gtp", "ok": false, "count": 0, "error": null }, { "type": "ztna", "ok": false, "count": 0, "error": null }, { "type": "file-filter", "ok": true, "count": 0, "error": null }, { "type": "icap", "ok": true, "count": 0, "error": null } ], "logSamples": { "traffic": { "ok": false, "source": "memory", "type": "traffic", "path": "/api/v2/log/memory/traffic?rows=50", "count": 0, "results": [], "error": null }, "event": { "ok": false, "source": "memory", "type": "event", "path": "/api/v2/log/memory/event?rows=50", "count": 0, "results": [], "error": null }, "virus": { "ok": true, "source": "memory", "type": "virus", "path": "/api/v2/log/memory/virus?rows=50", "count": 0, "results": [], "error": null }, "webfilter": { "ok": true, "source": "memory", "type": "webfilter", "path": "/api/v2/log/memory/webfilter?rows=50", "count": 50, "results": [ { "date": "2026-07-25", "time": "15:10:40", "eventtime": 1785017440800613000, "tz": "-0700", "logid": "0316013056", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_blk", "level": "warning", "vd": "root", "policyid": 8, "poluuid": "e12cf320-8178-51f1-1135-b50862a115c5", "policytype": "policy", "sessionid": 2436535, "srcip": "3.129.187.38", "srcport": 51466, "srccountry": "United States", "srcintf": "wan1", "srcintfrole": "wan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "192.168.1.227", "dstport": 80, "dstcountry": "Reserved", "dstintf": "lan", "dstintfrole": "lan", "dstuuid": "e12babbe-8178-51f1-e943-145a07fcc2a0", "proto": 6, "httpmethod": "GET", "service": "HTTP", "hostname": "177.206.110.120", "agent": "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_", "profile": "default", "action": "blocked", "reqtype": "direct", "url": "http://177.206.110.120/", "sentbyte": 196, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to a denied category in policy", "ratemethod": "domain", "cat": 0, "catdesc": "Unrated", "_metadata": { "#": 1, "logid": 13056, "timestamp": 1785017440000, "roll": 65531 } }, { "date": "2026-07-25", "time": "15:09:04", "eventtime": 1785017345300685600, "tz": "-0700", "logid": "0316013056", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_blk", "level": "warning", "vd": "root", "policyid": 8, "poluuid": "e12cf320-8178-51f1-1135-b50862a115c5", "policytype": "policy", "sessionid": 2436060, "srcip": "3.129.187.38", "srcport": 57918, "srccountry": "United States", "srcintf": "wan1", "srcintfrole": "wan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "192.168.1.227", "dstport": 80, "dstcountry": "Reserved", "dstintf": "lan", "dstintfrole": "lan", "dstuuid": "e12babbe-8178-51f1-e943-145a07fcc2a0", "proto": 6, "httpmethod": "GET", "service": "HTTP", "hostname": "177.206.110.120", "agent": "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_", "profile": "default", "action": "blocked", "reqtype": "direct", "url": "http://177.206.110.120/", "sentbyte": 196, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to a denied category in policy", "ratemethod": "domain", "cat": 0, "catdesc": "Unrated", "_metadata": { "#": 2, "logid": 13056, "timestamp": 1785017344000, "roll": 65531 } }, { "date": "2026-07-25", "time": "14:21:43", "eventtime": 1785014502591328300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 3, "poluuid": "5a9c8baa-816d-51f1-2f41-b5dd9b64eb60", "policytype": "policy", "sessionid": 2423799, "srcip": "192.168.100.105", "srcport": 53617, "srccountry": "Reserved", "srcintf": "vlan100", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 3, "logid": 13312, "timestamp": 1785014503000, "roll": 65532 } }, { "date": "2026-07-25", "time": "14:21:42", "eventtime": 1785014501903310000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 3, "poluuid": "5a9c8baa-816d-51f1-2f41-b5dd9b64eb60", "policytype": "policy", "sessionid": 2423792, "srcip": "192.168.100.105", "srcport": 64574, "srccountry": "Reserved", "srcintf": "vlan100", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 4, "logid": 13312, "timestamp": 1785014502000, "roll": 65532 } }, { "date": "2026-07-25", "time": "14:00:35", "eventtime": 1785013235456786200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2419654, "srcip": "192.168.1.105", "srcport": 58558, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 5, "logid": 13312, "timestamp": 1785013235000, "roll": 65532 } }, { "date": "2026-07-25", "time": "14:00:35", "eventtime": 1785013235464239900, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2419653, "srcip": "192.168.1.105", "srcport": 55784, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 6, "logid": 13312, "timestamp": 1785013235000, "roll": 65532 } }, { "date": "2026-07-25", "time": "13:27:56", "eventtime": 1785011275291752200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2412103, "srcip": "192.168.1.105", "srcport": 56384, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 7, "logid": 13312, "timestamp": 1785011276000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:56", "eventtime": 1785011275280140300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2412101, "srcip": "192.168.1.105", "srcport": 52872, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 8, "logid": 13312, "timestamp": 1785011276000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:56", "eventtime": 1785011275270491400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2412099, "srcip": "192.168.1.105", "srcport": 59388, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 9, "logid": 13312, "timestamp": 1785011276000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:55", "eventtime": 1785011275285455000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2412102, "srcip": "192.168.1.105", "srcport": 58905, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 10, "logid": 13312, "timestamp": 1785011275000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:55", "eventtime": 1785011275274983000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2412100, "srcip": "192.168.1.105", "srcport": 53329, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 11, "logid": 13312, "timestamp": 1785011275000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:52", "eventtime": 1785011271798331100, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2411976, "srcip": "192.168.1.105", "srcport": 63285, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 12, "logid": 13312, "timestamp": 1785011272000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:52", "eventtime": 1785011271790061800, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2411977, "srcip": "192.168.1.105", "srcport": 55134, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 13, "logid": 13312, "timestamp": 1785011272000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:27:51", "eventtime": 1785011271608636200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2411972, "srcip": "192.168.1.105", "srcport": 55142, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 14, "logid": 13312, "timestamp": 1785011271000, "roll": 65533 } }, { "date": "2026-07-25", "time": "13:18:36", "eventtime": 1785010716838875400, "tz": "-0700", "logid": "0316013056", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_blk", "level": "warning", "vd": "root", "policyid": 8, "poluuid": "e12cf320-8178-51f1-1135-b50862a115c5", "policytype": "policy", "sessionid": 2409919, "srcip": "205.210.31.172", "srcport": 58790, "srccountry": "Brazil", "srcintf": "wan1", "srcintfrole": "wan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "192.168.1.227", "dstport": 80, "dstcountry": "Reserved", "dstintf": "lan", "dstintfrole": "lan", "dstuuid": "e12babbe-8178-51f1-e943-145a07fcc2a0", "proto": 6, "httpmethod": "GET", "service": "HTTP", "hostname": "177.206.110.120", "agent": "Hello from Palo Alto Networks, find out more about our scans in ", "profile": "default", "action": "blocked", "reqtype": "direct", "url": "http://177.206.110.120/", "sentbyte": 223, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to a denied category in policy", "ratemethod": "domain", "cat": 0, "catdesc": "Unrated", "_metadata": { "#": 15, "logid": 13056, "timestamp": 1785010716000, "roll": 65533 } }, { "date": "2026-07-25", "time": "11:52:13", "eventtime": 1785005533096603000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2384955, "srcip": "192.168.1.116", "srcport": 64985, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 16, "logid": 13312, "timestamp": 1785005533000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:49:27", "eventtime": 1785005366402886000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2384070, "srcip": "192.168.1.118", "srcport": 50353, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 17, "logid": 13312, "timestamp": 1785005367000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:49:26", "eventtime": 1785005366395605200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2384069, "srcip": "192.168.1.118", "srcport": 58596, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 18, "logid": 13312, "timestamp": 1785005366000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:11:01", "eventtime": 1785003060476316400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2372374, "srcip": "192.168.1.116", "srcport": 54552, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 19, "logid": 13312, "timestamp": 1785003061000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:11:00", "eventtime": 1785003060202858500, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2372368, "srcip": "192.168.1.116", "srcport": 62389, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 20, "logid": 13312, "timestamp": 1785003060000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:06:37", "eventtime": 1785002797401560300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2370900, "srcip": "192.168.1.120", "srcport": 54169, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.6", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 21, "logid": 13312, "timestamp": 1785002797000, "roll": 65534 } }, { "date": "2026-07-25", "time": "11:06:37", "eventtime": 1785002797301728500, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2370892, "srcip": "192.168.1.120", "srcport": 54161, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.7", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 22, "logid": 13312, "timestamp": 1785002797000, "roll": 65534 } }, { "date": "2026-07-25", "time": "09:04:58", "eventtime": 1784995498287731200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2338697, "srcip": "192.168.1.120", "srcport": 63671, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.5", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 23, "logid": 13312, "timestamp": 1784995498000, "roll": 65534 } }, { "date": "2026-07-25", "time": "09:04:29", "eventtime": 1784995469231488500, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2338459, "srcip": "192.168.1.120", "srcport": 49924, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 24, "logid": 13312, "timestamp": 1784995469000, "roll": 65534 } }, { "date": "2026-07-25", "time": "08:06:49", "eventtime": 1784992009228041700, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2321840, "srcip": "192.168.1.105", "srcport": 59637, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 25, "logid": 13312, "timestamp": 1784992009000, "roll": 65534 } }, { "date": "2026-07-25", "time": "08:06:49", "eventtime": 1784992009221634600, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2321839, "srcip": "192.168.1.105", "srcport": 49805, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 26, "logid": 13312, "timestamp": 1784992009000, "roll": 65534 } }, { "date": "2026-07-25", "time": "08:06:49", "eventtime": 1784992009113808600, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2321837, "srcip": "192.168.1.105", "srcport": 53564, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 27, "logid": 13312, "timestamp": 1784992009000, "roll": 65534 } }, { "date": "2026-07-25", "time": "04:59:13", "eventtime": 1784980752791637000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2287307, "srcip": "192.168.1.116", "srcport": 57820, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "64.78.200.1", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 28, "logid": 13312, "timestamp": 1784980753000, "roll": 65534 } }, { "date": "2026-07-25", "time": "04:07:13", "eventtime": 1784977632676145200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2274971, "srcip": "192.168.1.120", "srcport": 52019, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.7", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 29, "logid": 13312, "timestamp": 1784977633000, "roll": 65534 } }, { "date": "2026-07-25", "time": "03:47:15", "eventtime": 1784976434756569300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2269935, "srcip": "192.168.1.116", "srcport": 57372, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.88.112", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1540, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 30, "logid": 13312, "timestamp": 1784976435000, "roll": 65534 } }, { "date": "2026-07-25", "time": "01:52:44", "eventtime": 1784969564743396900, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2241328, "srcip": "192.168.1.105", "srcport": 59023, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 31, "logid": 13312, "timestamp": 1784969564000, "roll": 65534 } }, { "date": "2026-07-25", "time": "01:36:59", "eventtime": 1784968619467015000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2237030, "srcip": "192.168.1.116", "srcport": 56899, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.88.117", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 32, "logid": 13312, "timestamp": 1784968619000, "roll": 65534 } }, { "date": "2026-07-25", "time": "01:20:47", "eventtime": 1784967646524060400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2233102, "srcip": "192.168.1.116", "srcport": 55210, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 33, "logid": 13312, "timestamp": 1784967647000, "roll": 65534 } }, { "date": "2026-07-25", "time": "01:20:46", "eventtime": 1784967646535165400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2233103, "srcip": "192.168.1.116", "srcport": 56840, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 34, "logid": 13312, "timestamp": 1784967646000, "roll": 65534 } }, { "date": "2026-07-25", "time": "01:20:46", "eventtime": 1784967646296488200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2233097, "srcip": "192.168.1.116", "srcport": 61143, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 35, "logid": 13312, "timestamp": 1784967646000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:13", "eventtime": 1784963113047753700, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214230, "srcip": "192.168.1.120", "srcport": 58913, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 36, "logid": 13312, "timestamp": 1784963113000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:13", "eventtime": 1784963113034739500, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214228, "srcip": "192.168.1.120", "srcport": 58861, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 37, "logid": 13312, "timestamp": 1784963113000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:13", "eventtime": 1784963113054467800, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214231, "srcip": "192.168.1.120", "srcport": 55831, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 38, "logid": 13312, "timestamp": 1784963113000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:13", "eventtime": 1784963113040087300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214229, "srcip": "192.168.1.120", "srcport": 55218, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 39, "logid": 13312, "timestamp": 1784963113000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:12", "eventtime": 1784963112525900800, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214222, "srcip": "192.168.1.120", "srcport": 50782, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 40, "logid": 13312, "timestamp": 1784963112000, "roll": 65534 } }, { "date": "2026-07-25", "time": "00:05:12", "eventtime": 1784963112408631000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2214221, "srcip": "192.168.1.120", "srcport": 56260, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 41, "logid": 13312, "timestamp": 1784963112000, "roll": 65534 } }, { "date": "2026-07-24", "time": "17:17:34", "eventtime": 1784938654155579400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2106162, "srcip": "192.168.1.116", "srcport": 50028, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 42, "logid": 13312, "timestamp": 1784938654000, "roll": 65534 } }, { "date": "2026-07-24", "time": "17:08:58", "eventtime": 1784938137681886000, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2103463, "srcip": "192.168.1.116", "srcport": 62052, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 43, "logid": 13312, "timestamp": 1784938138000, "roll": 65534 } }, { "date": "2026-07-24", "time": "17:08:58", "eventtime": 1784938137591513300, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2103459, "srcip": "192.168.1.116", "srcport": 52677, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 44, "logid": 13312, "timestamp": 1784938138000, "roll": 65534 } }, { "date": "2026-07-24", "time": "17:08:57", "eventtime": 1784938137667166500, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2103462, "srcip": "192.168.1.116", "srcport": 53286, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.11", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 17, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1200, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 45, "logid": 13312, "timestamp": 1784938137000, "roll": 65534 } }, { "date": "2026-07-24", "time": "17:06:55", "eventtime": 1784938014564470800, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2102881, "srcip": "192.168.1.116", "srcport": 62045, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.9", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1540, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 46, "logid": 13312, "timestamp": 1784938015000, "roll": 65534 } }, { "date": "2026-07-24", "time": "14:59:51", "eventtime": 1784930391341516000, "tz": "-0700", "logid": "0316013056", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_blk", "level": "warning", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2063803, "srcip": "192.168.1.120", "srcport": 60750, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "88.223.85.42", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "dashboard.webbetheme.com", "profile": "default", "action": "blocked", "reqtype": "direct", "url": "https://dashboard.webbetheme.com/", "sentbyte": 1547, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to a denied category in policy", "ratemethod": "domain", "cat": 0, "catdesc": "Unrated", "_metadata": { "#": 47, "logid": 13056, "timestamp": 1784930391000, "roll": 65534 } }, { "date": "2026-07-24", "time": "14:58:35", "eventtime": 1784930314996343800, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2063230, "srcip": "192.168.1.118", "srcport": 50277, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.250.105.4", "dstport": 443, "dstcountry": "Brazil", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "mask-api.icloud.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://mask-api.icloud.com/", "sentbyte": 1542, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 48, "logid": 13312, "timestamp": 1784930315000, "roll": 65534 } }, { "date": "2026-07-24", "time": "14:45:07", "eventtime": 1784929507867230200, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2058236, "srcip": "192.168.1.120", "srcport": 60629, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "17.132.85.5", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 49, "logid": 13312, "timestamp": 1784929507000, "roll": 65534 } }, { "date": "2026-07-24", "time": "14:45:06", "eventtime": 1784929506989468400, "tz": "-0700", "logid": "0317013312", "type": "utm", "subtype": "webfilter", "eventtype": "ftgd_allow", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2058204, "srcip": "192.168.1.120", "srcport": 60612, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "srcuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "dstip": "64.78.200.1", "dstport": 443, "dstcountry": "United States", "dstintf": "wan1", "dstintfrole": "wan", "dstuuid": "098471a6-813b-51f1-4c46-149d17b446dc", "proto": 6, "service": "HTTPS", "hostname": "doh.dns.apple.com", "profile": "default", "action": "passthrough", "reqtype": "direct", "url": "https://doh.dns.apple.com/", "sentbyte": 1544, "rcvdbyte": 0, "direction": "outgoing", "msg": "URL belongs to an allowed category in policy", "ratemethod": "domain", "cat": 59, "catdesc": "Proxy Avoidance", "crscore": 10, "craction": 4194304, "crlevel": "medium", "_metadata": { "#": 50, "logid": 13312, "timestamp": 1784929506000, "roll": 65534 } } ], "error": null }, "ips": { "ok": true, "source": "memory", "type": "ips", "path": "/api/v2/log/memory/ips?rows=50", "count": 14, "results": [ { "date": "2026-07-25", "time": "15:03:36", "eventtime": 1785017016981421000, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2432985, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61874328, "msg": "name_server: DNS.PTR.Records.Scan, repeated 169 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 1, "logid": 16384, "timestamp": 1785017016000, "roll": 65531, "archive": false } }, { "date": "2026-07-25", "time": "15:03:32", "eventtime": 1785017012432194800, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2432985, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61874326, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 2, "logid": 16384, "timestamp": 1785017012000, "roll": 65531, "archive": false } }, { "date": "2026-07-25", "time": "14:03:36", "eventtime": 1785013416895746600, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2419443, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61872150, "msg": "name_server: DNS.PTR.Records.Scan, repeated 82 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 3, "logid": 16384, "timestamp": 1785013416000, "roll": 65532, "archive": false } }, { "date": "2026-07-25", "time": "14:03:36", "eventtime": 1785013416891730400, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2419442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61872153, "msg": "name_server: DNS.PTR.Records.Scan, repeated 82 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 4, "logid": 16384, "timestamp": 1785013416000, "roll": 65532, "archive": false } }, { "date": "2026-07-25", "time": "14:03:29", "eventtime": 1785013409465204500, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2419442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61872148, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 5, "logid": 16384, "timestamp": 1785013409000, "roll": 65532, "archive": false } }, { "date": "2026-07-25", "time": "14:03:29", "eventtime": 1785013409456792600, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2419443, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61872147, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 6, "logid": 16384, "timestamp": 1785013409000, "roll": 65532, "archive": false } }, { "date": "2026-07-25", "time": "13:03:31", "eventtime": 1785009812080551700, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405441, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869784, "msg": "name_server: DNS.PTR.Records.Scan, repeated 14 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 7, "logid": 16384, "timestamp": 1785009811000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:03:31", "eventtime": 1785009811988720400, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869781, "msg": "name_server: DNS.PTR.Records.Scan, repeated 16 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 8, "logid": 16384, "timestamp": 1785009811000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:03:24", "eventtime": 1785009804787558700, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405441, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869780, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 9, "logid": 16384, "timestamp": 1785009804000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:03:24", "eventtime": 1785009804767451600, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869777, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 10, "logid": 16384, "timestamp": 1785009804000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:03:01", "eventtime": 1785009782060923100, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405441, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869712, "msg": "name_server: DNS.PTR.Records.Scan, repeated 6 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 11, "logid": 16384, "timestamp": 1785009781000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:03:01", "eventtime": 1785009781972413400, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869714, "msg": "name_server: DNS.PTR.Records.Scan, repeated 6 times", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 12, "logid": 16384, "timestamp": 1785009781000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:02:57", "eventtime": 1785009777807248400, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405442, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 53094, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869710, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 13, "logid": 16384, "timestamp": 1785009777000, "roll": 65533, "archive": false } }, { "date": "2026-07-25", "time": "13:02:57", "eventtime": 1785009777792415000, "tz": "-0700", "logid": "0419016384", "type": "utm", "subtype": "ips", "eventtype": "signature", "level": "alert", "vd": "root", "severity": "low", "srcip": "192.168.1.111", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "sessionid": 2405441, "action": "detected", "proto": 17, "service": "DNS", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "attack": "DNS.PTR.Records.Scan", "srcport": 50515, "dstport": 53, "direction": "outgoing", "attackid": 51391, "profile": "high_security", "ref": "http://www.fortinet.com/ids/VID51391", "incidentserialno": 61869709, "msg": "name_server: DNS.PTR.Records.Scan", "crscore": 5, "craction": 32768, "crlevel": "low", "_metadata": { "#": 14, "logid": 16384, "timestamp": 1785009777000, "roll": 65533, "archive": false } } ], "error": null }, "app-ctrl": { "ok": true, "source": "memory", "type": "app-ctrl", "path": "/api/v2/log/memory/app-ctrl?rows=50", "count": 50, "results": [ { "date": "2026-07-25", "time": "15:58:32", "eventtime": 1785020312628254200, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 16060, "srcip": "179.94.69.75", "srccountry": "Brazil", "dstip": "192.168.1.227", "dstcountry": "Reserved", "srcport": 50071, "dstport": 22, "srcintf": "wan1", "srcintfrole": "wan", "dstintf": "lan", "dstintfrole": "lan", "proto": 6, "service": "SSH", "direction": "outgoing", "policyid": 18, "poluuid": "54f9e922-885c-51f1-92c6-e8667805088f", "policytype": "policy", "sessionid": 2448952, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSH", "incidentserialno": 61878646, "msg": "Network.Service: SSH", "apprisk": "elevated", "_metadata": { "#": 1, "logid": 28704, "timestamp": 1785020312000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:32", "eventtime": 1785020311951939300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 16060, "srcip": "179.94.69.75", "srccountry": "Brazil", "dstip": "192.168.1.227", "dstcountry": "Reserved", "srcport": 50070, "dstport": 22, "srcintf": "wan1", "srcintfrole": "wan", "dstintf": "lan", "dstintfrole": "lan", "proto": 6, "service": "SSH", "direction": "outgoing", "policyid": 18, "poluuid": "54f9e922-885c-51f1-92c6-e8667805088f", "policytype": "policy", "sessionid": 2448951, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSH", "incidentserialno": 61878645, "msg": "Network.Service: SSH", "apprisk": "elevated", "_metadata": { "#": 2, "logid": 28704, "timestamp": 1785020312000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293524766500, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 59812, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448903, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878644, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 3, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293523682800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.185.77.204", "dstcountry": "United States", "srcport": 34764, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448902, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878642, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 4, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293415414000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.227", "srccountry": "Reserved", "dstip": "188.40.99.226", "dstcountry": "Germany", "srcport": 51698, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448894, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "api.open-meteo.com", "incidentserialno": 61878638, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "open-meteo.com", "_metadata": { "#": 5, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293322872300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.185.77.204", "dstcountry": "United States", "srcport": 34764, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448902, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878641, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 6, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293218978800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "100.23.47.229", "dstcountry": "United States", "srcport": 48672, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448896, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878634, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 7, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293018208300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "100.23.47.229", "dstcountry": "United States", "srcport": 48672, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448896, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878633, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 8, "logid": 28704, "timestamp": 1785020294000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293480849000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "44.227.122.21", "dstcountry": "United States", "srcport": 50960, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448899, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878640, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 9, "logid": 28704, "timestamp": 1785020293000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293325155300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 59812, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448903, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878643, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 10, "logid": 28704, "timestamp": 1785020293000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293279766000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "44.227.122.21", "dstcountry": "United States", "srcport": 50960, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448899, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878639, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 11, "logid": 28704, "timestamp": 1785020293000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:12", "eventtime": 1785020291598390000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.187.59.15", "dstcountry": "United States", "srcport": 56648, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448891, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878630, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 12, "logid": 28704, "timestamp": 1785020292000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:11", "eventtime": 1785020291397152500, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.187.59.15", "dstcountry": "United States", "srcport": 56648, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448891, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878629, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 13, "logid": 28704, "timestamp": 1785020291000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283516281900, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.215.88.151", "dstcountry": "United States", "srcport": 58782, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448869, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878625, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 14, "logid": 28704, "timestamp": 1785020284000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283545574400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 59394, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448870, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878627, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 15, "logid": 28704, "timestamp": 1785020284000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283343796700, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 59394, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448870, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878626, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 16, "logid": 28704, "timestamp": 1785020284000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:58:03", "eventtime": 1785020283316431400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.215.88.151", "dstcountry": "United States", "srcport": 58782, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448869, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878624, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 17, "logid": 28704, "timestamp": 1785020283000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:56", "eventtime": 1785020275780108800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 24466, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "icmpid": "0x2403", "icmptype": "0x08", "icmpcode": "0x00", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 1, "service": "PING", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448846, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "Ping", "incidentserialno": 61878621, "msg": "Network.Service: Ping", "apprisk": "elevated", "_metadata": { "#": 18, "logid": 28704, "timestamp": 1785020276000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:49", "eventtime": 1785020268527778800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.223.238.41", "dstcountry": "United States", "srcport": 42012, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448822, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878619, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 19, "logid": 28704, "timestamp": 1785020269000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:49", "eventtime": 1785020268326531600, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.223.238.41", "dstcountry": "United States", "srcport": 42012, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448822, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878618, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 20, "logid": 28704, "timestamp": 1785020269000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:35", "eventtime": 1785020254530967600, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.100.105", "srccountry": "Reserved", "dstip": "108.138.14.25", "dstcountry": "Brazil", "srcport": 51279, "dstport": 443, "srcintf": "vlan100", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 3, "poluuid": "5a9c8baa-816d-51f1-2f41-b5dd9b64eb60", "policytype": "policy", "sessionid": 2448790, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "clientsettingscdn.roblox.com", "incidentserialno": 61878616, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "clientsettingscdn.roblox.com", "_metadata": { "#": 21, "logid": 28704, "timestamp": 1785020255000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:35", "eventtime": 1785020254525847300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.100.105", "srccountry": "Reserved", "dstip": "108.138.14.25", "dstcountry": "Brazil", "srcport": 51279, "dstport": 443, "srcintf": "vlan100", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 3, "poluuid": "5a9c8baa-816d-51f1-2f41-b5dd9b64eb60", "policytype": "policy", "sessionid": 2448790, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878615, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 22, "logid": 28704, "timestamp": 1785020255000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:25", "eventtime": 1785020244278627600, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.184.47.135", "dstcountry": "United States", "srcport": 58444, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448776, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878613, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 23, "logid": 28704, "timestamp": 1785020245000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:25", "eventtime": 1785020244076814800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.184.47.135", "dstcountry": "United States", "srcport": 58444, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448776, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878612, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 24, "logid": 28704, "timestamp": 1785020245000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:25", "eventtime": 1785020244032675300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "184.33.122.48", "dstcountry": "United States", "srcport": 36206, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448774, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878607, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 25, "logid": 28704, "timestamp": 1785020245000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020244274119400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 43362, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448777, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878611, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 26, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020244074559200, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 43362, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448777, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878610, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 27, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020244052042000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.223.238.41", "dstcountry": "United States", "srcport": 54768, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448775, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878609, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 28, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020244028716500, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "54.185.230.194", "dstcountry": "United States", "srcport": 43652, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448773, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878605, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 29, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243847251000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "34.223.238.41", "dstcountry": "United States", "srcport": 54768, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448775, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878608, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 30, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243827844000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "54.185.230.194", "dstcountry": "United States", "srcport": 43652, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448773, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878604, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 31, "logid": 28704, "timestamp": 1785020244000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:23", "eventtime": 1785020243830296000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "184.33.122.48", "dstcountry": "United States", "srcport": 36206, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448774, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878606, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 32, "logid": 28704, "timestamp": 1785020243000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:17", "eventtime": 1785020237292232400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.3", "srccountry": "Reserved", "dstip": "35.167.255.192", "dstcountry": "United States", "srcport": 38300, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448750, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878598, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 33, "logid": 28704, "timestamp": 1785020237000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:12", "eventtime": 1785020231646573800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.185.77.204", "dstcountry": "United States", "srcport": 55578, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448739, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878596, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 34, "logid": 28704, "timestamp": 1785020232000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:57:11", "eventtime": 1785020231418067200, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "32.185.77.204", "dstcountry": "United States", "srcport": 55578, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448739, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878595, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 35, "logid": 28704, "timestamp": 1785020231000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:54", "eventtime": 1785020213711120000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 24466, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "1.1.1.1", "dstcountry": "Australia", "icmpid": "0x2403", "icmptype": "0x08", "icmpcode": "0x00", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 1, "service": "PING", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448699, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "Ping", "incidentserialno": 61878593, "msg": "Network.Service: Ping", "apprisk": "elevated", "_metadata": { "#": 36, "logid": 28704, "timestamp": 1785020214000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:48", "eventtime": 1785020208488085200, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "100.23.47.229", "dstcountry": "United States", "srcport": 56790, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448679, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878591, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 37, "logid": 28704, "timestamp": 1785020208000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:48", "eventtime": 1785020208289036800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "100.23.47.229", "dstcountry": "United States", "srcport": 56790, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448679, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878590, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 38, "logid": 28704, "timestamp": 1785020208000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:46", "eventtime": 1785020206306902300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.227", "srccountry": "Reserved", "dstip": "52.95.163.31", "dstcountry": "Brazil", "srcport": 42158, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448659, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "anderson-pj-backups-352821213845.s3.sa-east-1.amazonaws.com", "incidentserialno": 61878588, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "*.s3-sa-east-1.amazonaws.com", "_metadata": { "#": 39, "logid": 28704, "timestamp": 1785020206000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:46", "eventtime": 1785020206293538800, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.227", "srccountry": "Reserved", "dstip": "52.95.163.31", "dstcountry": "Brazil", "srcport": 42158, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448659, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878587, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 40, "logid": 28704, "timestamp": 1785020206000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:39", "eventtime": 1785020198518086400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "52.88.114.81", "dstcountry": "United States", "srcport": 52272, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448626, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878584, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 41, "logid": 28704, "timestamp": 1785020199000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:39", "eventtime": 1785020198318359300, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "52.88.114.81", "dstcountry": "United States", "srcport": 52272, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448626, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878583, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 42, "logid": 28704, "timestamp": 1785020199000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:27", "eventtime": 1785020186954075400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 48078, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448608, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878580, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 43, "logid": 28704, "timestamp": 1785020187000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:27", "eventtime": 1785020186754940700, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 48078, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448608, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878579, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 44, "logid": 28704, "timestamp": 1785020187000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:04", "eventtime": 1785020163541968100, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 45196, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448543, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878577, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 45, "logid": 28704, "timestamp": 1785020164000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:04", "eventtime": 1785020163538725400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "44.227.122.21", "dstcountry": "United States", "srcport": 47812, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448542, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "trace.svc.ui.com", "incidentserialno": 61878575, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "svc.ui.com", "_metadata": { "#": 46, "logid": 28704, "timestamp": 1785020164000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:04", "eventtime": 1785020163338641400, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "44.227.122.21", "dstcountry": "United States", "srcport": 47812, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448542, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878574, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 47, "logid": 28704, "timestamp": 1785020164000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:56:03", "eventtime": 1785020163341442600, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 15895, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "18.236.13.1", "dstcountry": "United States", "srcport": 45196, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "HTTPS", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448543, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "SSL", "incidentserialno": 61878576, "msg": "Network.Service: SSL", "apprisk": "elevated", "_metadata": { "#": 48, "logid": 28704, "timestamp": 1785020163000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:55:52", "eventtime": 1785020151636287000, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 24466, "srcip": "192.168.1.2", "srccountry": "Reserved", "dstip": "8.8.8.8", "dstcountry": "United States", "icmpid": "0x2403", "icmptype": "0x08", "icmpcode": "0x00", "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 1, "service": "PING", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448509, "applist": "block-high-risk", "action": "pass", "appcat": "Network.Service", "app": "Ping", "incidentserialno": 61878571, "msg": "Network.Service: Ping", "apprisk": "elevated", "_metadata": { "#": 49, "logid": 28704, "timestamp": 1785020152000, "roll": 65530, "archive": false } }, { "date": "2026-07-25", "time": "15:55:51", "eventtime": 1785020150163134200, "tz": "-0700", "logid": "1059028704", "type": "utm", "subtype": "app-ctrl", "eventtype": "signature", "level": "information", "vd": "root", "appid": 40568, "srcip": "192.168.1.227", "srccountry": "Reserved", "dstip": "162.159.140.245", "dstcountry": "United States", "srcport": 54270, "dstport": 443, "srcintf": "lan", "srcintfrole": "lan", "dstintf": "wan1", "dstintfrole": "wan", "proto": 6, "service": "SSL", "direction": "outgoing", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448496, "applist": "block-high-risk", "action": "pass", "appcat": "Web.Client", "app": "HTTPS.BROWSER", "hostname": "api.openai.com", "incidentserialno": 61878569, "url": "/", "msg": "Web.Client: HTTPS.BROWSER", "apprisk": "medium", "scertcname": "api.openai.com", "_metadata": { "#": 50, "logid": 28704, "timestamp": 1785020151000, "roll": 65530, "archive": false } } ], "error": null }, "dns": { "ok": true, "source": "memory", "type": "dns", "path": "/api/v2/log/memory/dns?rows=50", "count": 50, "results": [ { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293115669500, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448900, "srcip": "192.168.1.2", "srcport": 43696, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 16863, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "32.185.77.204, 44.224.160.33, 54.214.41.234, 52.11.157.12, 34.215.88.151, 32.187.59.15, 44.241.135.246, 100.23.47.229", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 1, "logid": 54802, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293115636000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448900, "srcip": "192.168.1.2", "srcport": 43696, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 12589, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:b850:5f4f:5c76:f4c, 2600:1f14:598:a402:e7fb:9c54:90bc:ce5c, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a402:5478:64e5:96db:c62d, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a401:d79a:5e7b:ae51:9657", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 2, "logid": 54802, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293110447000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448900, "srcip": "192.168.1.2", "srcport": 43696, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 12589, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 3, "logid": 54000, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293110270000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448900, "srcip": "192.168.1.2", "srcport": 43696, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 16863, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 4, "logid": 54000, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293073743400, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448898, "srcip": "192.168.1.2", "srcport": 58810, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 43740, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 5, "logid": 54802, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293073713200, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448898, "srcip": "192.168.1.2", "srcport": 58810, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 12492, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "44.227.122.21, 54.185.230.194, 18.236.13.1, 34.223.238.41, 32.184.47.135, 34.215.88.151, 184.33.122.48, 54.213.213.240", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 6, "logid": 54802, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293069542400, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448898, "srcip": "192.168.1.2", "srcport": 58810, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 43740, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 7, "logid": 54000, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:14", "eventtime": 1785020293069422000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448898, "srcip": "192.168.1.2", "srcport": 58810, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 12492, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 8, "logid": 54000, "timestamp": 1785020294000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293121748200, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448901, "srcip": "192.168.1.2", "srcport": 52890, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 31379, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 9, "logid": 54802, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293120917800, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448901, "srcip": "192.168.1.2", "srcport": 52890, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 57220, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "18.236.13.1, 34.223.238.41, 32.184.47.135, 34.215.88.151, 184.33.122.48, 54.213.213.240, 44.227.122.21, 54.185.230.194", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 10, "logid": 54802, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293116746500, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448901, "srcip": "192.168.1.2", "srcport": 52890, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 31379, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 11, "logid": 54000, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020293116617200, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448901, "srcip": "192.168.1.2", "srcport": 52890, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 57220, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 12, "logid": 54000, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292815225000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448895, "srcip": "192.168.1.2", "srcport": 51530, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 64301, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "100.23.47.229, 32.185.77.204, 44.224.160.33, 54.214.41.234, 52.11.157.12, 34.215.88.151, 32.187.59.15, 44.241.135.246", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 13, "logid": 54802, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292814406000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448895, "srcip": "192.168.1.2", "srcport": 51530, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 44060, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 14, "logid": 54802, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292809874400, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448895, "srcip": "192.168.1.2", "srcport": 51530, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 44060, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 15, "logid": 54000, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292809753300, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448895, "srcip": "192.168.1.2", "srcport": 51530, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 64301, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 16, "logid": 54000, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292728329000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448893, "srcip": "192.168.1.227", "srcport": 53172, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 29671, "qname": "api.open-meteo.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "188.40.99.226", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 17, "logid": 54802, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:13", "eventtime": 1785020292724332300, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448893, "srcip": "192.168.1.227", "srcport": 53172, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 29671, "qname": "api.open-meteo.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 18, "logid": 54000, "timestamp": 1785020293000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:12", "eventtime": 1785020291192637000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448890, "srcip": "192.168.1.2", "srcport": 44243, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 756, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 19, "logid": 54802, "timestamp": 1785020292000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:12", "eventtime": 1785020291192574200, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448890, "srcip": "192.168.1.2", "srcport": 44243, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 47300, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "32.187.59.15, 44.241.135.246, 100.23.47.229, 32.185.77.204, 44.224.160.33, 54.214.41.234, 52.11.157.12, 34.215.88.151", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 20, "logid": 54802, "timestamp": 1785020292000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:12", "eventtime": 1785020291188442600, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448890, "srcip": "192.168.1.2", "srcport": 44243, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 756, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 21, "logid": 54000, "timestamp": 1785020292000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:12", "eventtime": 1785020291188041000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448890, "srcip": "192.168.1.2", "srcport": 44243, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 47300, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 22, "logid": 54000, "timestamp": 1785020292000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283113038800, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448868, "srcip": "192.168.1.2", "srcport": 52486, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 64805, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "18.236.13.1, 34.223.238.41, 32.184.47.135, 34.215.88.151, 184.33.122.48, 54.213.213.240, 44.227.122.21, 54.185.230.194", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 23, "logid": 54802, "timestamp": 1785020284000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283112985600, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448868, "srcip": "192.168.1.2", "srcport": 52486, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 20533, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 24, "logid": 54802, "timestamp": 1785020284000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283108547000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448868, "srcip": "192.168.1.2", "srcport": 52486, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 20533, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 25, "logid": 54000, "timestamp": 1785020284000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:04", "eventtime": 1785020283108424000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448868, "srcip": "192.168.1.2", "srcport": 52486, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 64805, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 26, "logid": 54000, "timestamp": 1785020284000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:03", "eventtime": 1785020283106876000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448867, "srcip": "192.168.1.2", "srcport": 42198, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 15585, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 27, "logid": 54802, "timestamp": 1785020283000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:03", "eventtime": 1785020283106805200, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448867, "srcip": "192.168.1.2", "srcport": 42198, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 43504, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "34.215.88.151, 184.33.122.48, 54.213.213.240, 44.227.122.21, 54.185.230.194, 18.236.13.1, 34.223.238.41, 32.184.47.135", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 28, "logid": 54802, "timestamp": 1785020283000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:03", "eventtime": 1785020283101677600, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448867, "srcip": "192.168.1.2", "srcport": 42198, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 15585, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 29, "logid": 54000, "timestamp": 1785020283000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:58:03", "eventtime": 1785020283101542700, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448867, "srcip": "192.168.1.2", "srcport": 42198, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 43504, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 30, "logid": 54000, "timestamp": 1785020283000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:56", "eventtime": 1785020275779216000, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448845, "srcip": "192.168.1.2", "srcport": 34333, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 10371, "qname": "ping.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "1.1.1.1, 8.8.8.8", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 31, "logid": 54802, "timestamp": 1785020276000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:56", "eventtime": 1785020275775189800, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448845, "srcip": "192.168.1.2", "srcport": 34333, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 10371, "qname": "ping.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 32, "logid": 54000, "timestamp": 1785020276000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:48", "eventtime": 1785020268121264600, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448821, "srcip": "192.168.1.2", "srcport": 56067, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 62090, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 33, "logid": 54802, "timestamp": 1785020268000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:48", "eventtime": 1785020268120633900, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448821, "srcip": "192.168.1.2", "srcport": 56067, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 15003, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "34.223.238.41, 32.184.47.135, 34.215.88.151, 184.33.122.48, 54.213.213.240, 44.227.122.21, 54.185.230.194, 18.236.13.1", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 34, "logid": 54802, "timestamp": 1785020268000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:48", "eventtime": 1785020268116686600, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448821, "srcip": "192.168.1.2", "srcport": 56067, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 62090, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 35, "logid": 54000, "timestamp": 1785020268000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:48", "eventtime": 1785020268116564500, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448821, "srcip": "192.168.1.2", "srcport": 56067, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 15003, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 36, "logid": 54000, "timestamp": 1785020268000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:35", "eventtime": 1785020254194679800, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448788, "srcip": "192.168.1.2", "srcport": 43100, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 3736, "qname": "ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "18.67.162.2, 18.67.162.17, 18.67.162.10, 18.67.162.116", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 37, "logid": 54802, "timestamp": 1785020255000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:35", "eventtime": 1785020254190688000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448788, "srcip": "192.168.1.2", "srcport": 43100, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 3736, "qname": "ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 38, "logid": 54000, "timestamp": 1785020255000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243872561700, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448769, "srcip": "192.168.1.2", "srcport": 55953, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 54570, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a400:9aba:14b7:e9cb:19df, 2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 39, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243624514800, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448771, "srcip": "192.168.1.2", "srcport": 41996, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 22935, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 40, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243623589600, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448767, "srcip": "192.168.1.2", "srcport": 54752, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 9891, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "ipaddr": "2600:1f14:598:a402:f20c:3b31:730f:c97b, 2600:1f14:598:a400:caad:dc41:c6b1:e1e0, 2600:1f14:598:a402:1116:eb72:a81:a8c4, 2600:1f14:598:a403:75d1:65f3:5231:ed7e, 2600:1f14:598:a403:8d93:2013:49e4:4db3, 2600:1f14:598:a400:1337:fa08:d5a0:2482, 2600:1f14:598:a403:2ed5:9172:2f4a:1fe7, 2600:1f14:598:a400:9aba:14b7:e9cb:19df", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 41, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243590127400, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448771, "srcip": "192.168.1.2", "srcport": 41996, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 48513, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "184.33.122.48, 54.213.213.240, 44.227.122.21, 54.185.230.194, 18.236.13.1, 34.223.238.41, 32.184.47.135, 34.215.88.151", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 42, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243585645800, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448771, "srcip": "192.168.1.2", "srcport": 41996, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 22935, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 43, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243585540000, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448771, "srcip": "192.168.1.2", "srcport": 41996, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 48513, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 44, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243557368600, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448769, "srcip": "192.168.1.2", "srcport": 55953, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 7257, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "18.236.13.1, 32.185.77.204, 100.23.47.229, 35.167.255.192, 44.224.160.33, 32.184.47.135, 34.215.88.151, 54.213.213.240", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 45, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243552095700, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448769, "srcip": "192.168.1.2", "srcport": 55953, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 54570, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 46, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243552005600, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448769, "srcip": "192.168.1.2", "srcport": 55953, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 7257, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 47, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243523101200, "tz": "-0700", "logid": "1501054802", "type": "utm", "subtype": "dns", "eventtype": "dns-response", "level": "notice", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448767, "srcip": "192.168.1.2", "srcport": 54752, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 41620, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "ipaddr": "54.185.230.194, 18.236.13.1, 34.223.238.41, 32.184.47.135, 34.215.88.151, 184.33.122.48, 54.213.213.240, 44.227.122.21", "msg": "Domain is monitored", "action": "pass", "cat": 52, "catdesc": "Information Technology", "_metadata": { "#": 48, "logid": 54802, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243503126800, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448767, "srcip": "192.168.1.2", "srcport": 54752, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 9891, "qname": "trace.svc.ui.com", "qtype": "AAAA", "qtypeval": 28, "qclass": "IN", "_metadata": { "#": 49, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } }, { "date": "2026-07-25", "time": "15:57:24", "eventtime": 1785020243503006700, "tz": "-0700", "logid": "1500054000", "type": "utm", "subtype": "dns", "eventtype": "dns-query", "level": "information", "vd": "root", "policyid": 1, "poluuid": "0ad7669e-813b-51f1-6387-9cd796ac5168", "policytype": "policy", "sessionid": 2448767, "srcip": "192.168.1.2", "srcport": 54752, "srccountry": "Reserved", "srcintf": "lan", "srcintfrole": "lan", "dstip": "1.1.1.1", "dstport": 53, "dstcountry": "Australia", "dstintf": "wan1", "dstintfrole": "wan", "proto": 17, "profile": "default", "xid": 41620, "qname": "trace.svc.ui.com", "qtype": "A", "qtypeval": 1, "qclass": "IN", "_metadata": { "#": 50, "logid": 54000, "timestamp": 1785020244000, "roll": 65530 } } ], "error": null } } }