I was researching a possible infection today.
I was getting some hints on the log firewall of one of our netgate instances.
I could not find anything with glasswire. Not able to find a line with the port number. Not getting any results with the IP either or being able that want to check this criteria as a destination.
This is the last iterations of glasswire.
We are several years in developments now, we should be able to have a tab with raw history log of any connections attempts, not only the alive one and be able to do search like in the live view on a netgate instance or any others firewall alike with the destination and/or port number.
If I have glasswire I don’t want to rely on net stat command or endpoints tools.
In the end I had my informations not from glasswire (like I should have) but from the endpoint AV/firewall where I was able to make such a search…
A bit disappointing don’t you think?
Especially since so many posts in the forum are already talking about it from years ago