Unable to View Firewall Interface Connections in VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

Distributed Firewall (DFW) interface connections are not visible within VCF Operations for Networks, despite being active and verifiable within the environment.

The connections can be successfully validated natively in NSX CLI using command: 

su admin -c "get firewall <Interface_UUID> connection raw"

Environment

VCF Operations for Networks.

Resolution

This behavior is expected and operates as designed.

The connection per interface details are collected natively from the firewall_pkt.log file on NSX.

VCF Operations for Networks collects network flows rather than raw log information. Therefore, displaying these specific firewall interface log connections is not currently supported within the application.