LoclixDocs
Web application firewallPrivate Connect

Private Connect analytics

Review office traffic by IP address and inspect recent DNS queries.

Analytics view

  1. Open Private Connect.
  2. Select Manage interconnect for the office.
  3. Select Analytics.

Reports update about every ten seconds. If the gateway is unavailable, the last counters remain visible with their timestamp.

Transfer counters

Upload and download count forwarded IPv4 packet bytes. They exclude tunnel overhead, DNS requests handled by the gateway, and blocked traffic.

Source and destination lists rank IPs by combined upload and download. Each list shows up to 64 entries. Totals include all forwarded traffic even when an address is absent from a ranking. A truncation notice means some address details are missing.

Counters start when the gateway starts. Restarts and configuration changes reset them. The page shows the latest report; historical time-range queries are not available.

DNS activity

The page shows the latest 25 completed DNS queries, including source IP, query name, record type, response code, and policy action. Each query shows up to eight answers, limited to 256 characters each.

The DNS query counter includes completed accepted queries. The policy-response counter includes NXDOMAIN, refused, and custom-address responses. Rejected or malformed requests are excluded.

DNS activity resets when the gateway restarts. Check the report timestamp if the displayed queries have not changed.

Read the results

IP addresses identify network endpoints. If your router applies NAT before the tunnel, several clients appear under one address. Preserve client IPs as described in Office connection.

A destination IP can host several domains, and a DNS answer does not show whether a connection followed. Analytics does not show visited URLs or HTTPS content. DNS over HTTPS queries are outside the DNS activity list.

On this page