LOG

[Sergio77]

Hi All,
this is my first post... so be carefull :-)
I have a PfSense firewall (virtual) configured with 3 public IP. For every IP there is a NAT rule that enabled RDP port (for 3 different Windows Server).
I'd like to know (in the simpliest way possible) how to monitor every single connection on that ports (so I can make some statistics).
Anyone can help me please?

thanks

[Grimson]

RTFM:
https://docs.netgate.com/pfsense/en/latest/monitoring/index.html
https://docs.netgate.com/pfsense/en/latest/book/monitoring/index.html

BTW:
Opening RDP to the public internet is pretty stupid, use a VPN for remote access.

[isolatedvirus]

go within the rule you want to log and check the enable logging box.

[Sergio77]

@grimson RDP is open just for 1 IP... this should be a way to monitor the blocked sessions.