show security flow session pretty
Syntax
show security flow session pretty
Description
Displays the detailed information about security flow session. The output displays the information in a list to make it easy for you to read and monitor the flow session.
Required Privilege Level
View
Output Fields
Table 1 lists the output fields for the show security flow session
pretty command.
| Field Name | Field Description |
|---|---|
|
Advanced Security Feature Status |
Status of the advanced security feature status such as Content Security, IDP, Advance Anti-Malware, Security-Intelligence, ICAP-Redirect , and App-Routing. |
|
Bandwidth |
Client to server and server to client bytes added together and converted to MB or GB. |
|
Base Layer7 Application |
Base layer7 application details. |
|
Decrypted |
SSL proxy decryption status.
|
|
Decrypted-Mirrored |
Decryption mirror status. |
|
Destination-User |
Destination user details. |
|
Destination-Zone |
Flow session destination zone details. |
|
Duration |
Duration of the session. |
|
Final Layer7 Application |
The last classified application. |
|
Forwarding Type |
Show the type of current flow session. |
|
Forward Direction |
Interface, IP address, protocol, tag, and gateway information of this direction. |
|
Hardware Accelerated |
Status of the Express Path flow session. |
|
Inspection Mode |
Flow session inspection mode. |
|
JDPI Classification |
JDPI classification status. |
|
Layer4 Application |
Layer4 applications details. |
|
LSYS |
Logical system details. |
|
Plugin List |
List of the plugins used in the flow session. |
|
Policy |
Policy details. |
|
Reverse Direction |
Interface, IP address, protocol, tag, and gateway information of the flowdirection. |
|
Session ID |
Number that identifies the session. Use this ID to get more information about the session. |
|
Session HA Status |
Show the HA status. |
|
Session State |
Show the HA status. |
|
Session State |
Status of security flow session. |
|
Start time |
Time when the session was created, offset from the system start time. |
|
Source-User |
Shows the user source address. |
|
Source-Zone |
Flow session source zone details. |
|
Time Out |
Idle time-out after which the session expires. |
|
TSYS |
Tenant system details. |
|
Tunnel Inspection |
Tunnel inspection status. |
|
Tunneled Session |
Status of the tunnel session.
|
Sample Output
show security flow session pretty
user@host> show security flow session pretty
Session ID : 438249 Forward Direction : Interface:ge-0/0/0.1, 192.0.2.0/45750 --> 203.0.113.0/443;tcp, tag 0x0, Gateway 192.0.2.0 Reverse Direction : Interface:ge-0/0/2.0, 203.0.113.0/443 --> 198.51.100.04/45750;tcp, tag 0x0, Gateway 198.51.100.0 Forwarding Type : Route/Nat/Transparent/Secure-Wire/Tap Session State : Valid Session HA Status : Stand-alone Start Time : 350 s Duration : 19 s Timeout : 1800 s Time-to-Live : 1799 s Bandwidth : 18MB Source-User : example1.com\user123 Destination-User : Unknown LSYS : LSYS-X TSYS : TSYS-Y Source-Zone : Trust Destination-Zone : Untrust Policy : permit_urls/5 Layer4 Application : junos:https Base Layer7 Application : junos:SSL Final Layer7 Application : junos:CNN Inspection Mode : Flow Hardware Accelerated : False Decrypted : False Decryption-Mirrored : False JDPI Classification : Complete Tunneled Session : False Tunnel Inspection : N/A Advanced Security Feature Status: UTM : Flow Mode IDP : Flow Mode Advance Anti-Malware : Flow Mode Security-Intelligence : Flow Mode ICAP-Redirect : Flow Mode App-Routing : Flow Mode
Release Information
Command introduced in Junos OS Release 21.1R1.