Online Help
       
   A real-time session monitor for your firewall
Home Product News Features Download Buy FirePlotter Support Contact Us About Us

Click to see a FirePlotter Demonstration (3 mins)

Click to Enlarge Screenshot

Double Click to Enlarge

More Screenshots

What our users have said....

"I found the real-time operation of your product more useful than log analysis."

"I liked the ability to customize colours for certain ports, I was easily able to isolate Citrix traffic on multiple ports, VOip traffic on multiple ports."
more >>

Product News

This is where we let you know the latest developments and improvements in FirePlotter. If you want to see our development plans for FirePlotter, please click here: RoadMap

August 2008 - FirePlotter 1.40 b080827 released.

Improvements:
- Save windows resize on exit and restore on load.
- Added Dialog to warn users not to use Telnet as SSH is much more secure and stable.
- Format table counter with comma separated thousands.
- Add additional FP application Help.
- Add Right mouse click (RMC) to query IP address on DNSstuff.com.
- Added new ports to INI - 111=SunRPC, 993=IMAPS, 563=NNTPS, 465=SMTPS, 8080=HTTP Alt, 5190=AOL, 3052=APC, 2049=NFS, 1935=Flash CS, 1023=Reserved, 57=Terminal, 158=PCMail Srv.
- If run into windows resize problem then delete HKEY_CURRENT_USER\Software\GISS-UK.com\FirePlotter\FP-WindowPosition.


Bug Fix:
- Ping counts jump due to negative calculation resulting is large positive value.
- Found n+ updates can have Byte count less than n for same session! Cisco problem seen in 7.2(2).
- Ping duplicate entries with Cisco 7.2(2), changed code to ignore second entry of ANY duplicate.
- Sessions for FWSM Firewall Version 3.1(7) weren't being decoded properly.
- FWSM firmware version wasn't being decoded properly.

July 2008 - FirePlotter 1.40 b080728 released.

Improvements:
- Add exit confirmation if Esc (Cancel) or Close [x] is pressed.

Bug Fix:
- If FTP doesn't have a bandwidth colour then don't bother checking for Fixup sessions.
- Fixed FP (b080630) crashing on start-up in W2K.

June 2008 - FirePlotter 1.40 b080630 released.

Improvements:
- Add checking routine so cope with invalid PIX configuration hostname cross reference.
- If name can't be resolved it is returned as 111.111.111.111.
- Change PIX configuration processing to cope with 8.0 Description in 'name' entry.
- Add Protocol=SSH to ready to use INI fields.
- Add two Dameware ports to INI list.

June 2008 - FirePlotter 1.40 b080610 released.

Improvements:
- Fixed issues with Cisco PIX/ASA 7.2(4) not displaying correctly.
- We can now display ICMP for PIX/ASA.

June 2008 - FirePlotter 1.40 b080603 released.

Improvements:
- Added FirePlotter.ini parameter in [Display] section to control IP address to name resolution: DNS=6 (default) where using BINARY logic: 1=NetBIOS and Internet reverse DNS, 2=Internet reverse DNS only, 4=firewall configuration (Cisco only). e.g. DNS=6 means 2 (Internet reverse DNS) + 4 (firewall configuration).

June 2008 - FirePlotter 1.40 b080602 released.

Bug Fix:
- Update code to interpret new 'dev=' interface direction introduced in FortiOS 3.0 MR6 Patch2 by FortiNet.

May 2008 - FirePlotter 1.40 b080529 released.

Improvements:
- Add Training video link to FP Help.
- Add user message if fp.ini isn't found and abort.
- Add abort option for download loop to allow graceful connect to new firewall.

May 2008 - FirePlotter 1.40 b080519 released.

Improvements:
- Added SSH support.
- Add to Right Mouse Click on table the option to Copy the IP address.
- Add following model: Fortigate-1000AFA2, Fortigate-5001FA2, Fortigate-60M.
- Add to ini Protocol = ssh or telnet. This is not the same as port.
- Add to ini Port = x. Used in conjunction with Protocol i.e. 22, 23 or other.
- Add option to open fireplotterlog.txt from File menu.
- Changing Protocol will revert Port to default.
- Changed INI Firewall= from PIX to ASA/PIX.
- SocketTimeout= in INI in now in seconds rather than 100th of seconds. Default 5 seconds.
- Indicate license type in log file Licensed or Unlicensed and Evaluation or Annual.

Bug Fixes:
- Change the socket timeout detection routines to make more robust.
- Add Sleep to DNS check loop as there can be nothing to do which took utilization high for several milliseconds.
- Cisco authentication if user prompt not found was reporting telnet prompt error now says users prompt error.
- Improved Cisco configuration file hostname processing and lookup threads using semaphores (Mutex) to reduce conflict possibilities.

Feb to May 2008 - SSH integration.

Mar 25th 2008 - FirePlotter Fortiverified.

FirePlotter has completed FortiNet's Fortiverified certification process. FirePlotter has been tested and certified in FortiNet's product development labs for interoperability with the FortiNet product range. It also means GISS (developers of FirePlotter) are now accredited as Technology Partners with FortiNet. More >>

Feb 2008 - FirePlotter 1.3 b080207 released.

Improvements:
- Add following model: Fortigate-3600.
- Added some more debugging information for LogLevel=255 in [Connections]that includes dumping the basic FortiGate session table each time it's processed. Note LogLevel=255 significantly reduces FirePlotter performance, so for debug only.
- Updated status bar when processing offline data to include a count of session processed so when handling large data 130,000 session you can see FP is processing.
- Setup change. Default to Everyone rather than Just me. If 1st copy is installed at Everyone and upgrade as Just me they will get two copies installed. It must always be the same.

Bug Fixes:
- PIX authentication code as expecting Telnet Password to be in first buffer received from PIX if it wasn't then assumption was that the device responding to Telnet
thought wasn't actually a supported firewall i.e. UNIX etc.
- Change code to use Recv timeout to know connection attempt has failed.

Jan 2008 - FirePlotter 1.3 b080121 released.

Improvements:
- Increase the default column width of Service/Destination Port and wasn't wide enough show Basic view friendly names.
- Set TCP default timeout to 5 seconds instead 2 seconds.
- Add following model: Fortigate-800F.

Bug Fixes:
- IP address field while processing PIX connection file was only 16 bytes but host 'name' from connection file can be 63.
Result was that 'name' in table wasn't complete and never showed actual IP address
- FGT interface lookup was failing if last interface in list was actually being used and could cause FP to crash.
- Column width save and restore were not aligned with correct columns.
- PIX connection would hang then crash if system prompt was split across multiple download buffers.

Jan 2008 - FirePlotter 1.3 b080104 released.

Improvements:
- Protect Interface variable overrun when reading from Interface file.
- Improved TCP error reporting.

Bug Fixes:
- FGT interface lookup was assuming interfaces were sequential - now we know they're not so lookup routine was changed.
- FGT 2.80 now reporting correct model, firmware, serial etc.

Nov 2007 - FirePlotter 1.3 b071130 released.

Improvements:
- Move Service/Dest Prt and Session next to Direction to ensure first glance at FP in intuitive.
- Add 'Port=' notes to INI. to allow non-standard telnet port usage. This has been in FP for ages though not documented.
- Change status bar session count to show x/y, so how many sessions in current display against total session.
- In INI move Telnet user field before Telnet password.
- Change main dialog text from 'Connection Port' to 'Connection Type'.
- Change main dialog text for firewall from PIX/ASA to ASA/PIX.
- In FP.ini enhance some of the explanations of parameters.
- Change status bar text from 'Next update in' to 'Refresh in:' and 'Sessions' to 'Sessions:'.

Bug Fixes:
- ProcessPIXSystem changed to cope with format changes on ASA Failover with 8.0(2).
- Enhance ProcessPIXSessions to do some more reliable validation of session data before processing.
- Enhance Cisco and FGT validation of parameters and prevent over run of string lengths.
- Change Class of firewalls to reflect the web site buying model (Move ASA 5510 -> C2, Move ASA 5530 -> C3).

Nov 2007 - Cisco reveals bug in PIX/ASA v7.01 to 7.22 relevant to FirePlotter. More >>

Aug 2007 - FirePlotter 1.2.0 b070822 released.

Improvements:
- Add FGT-50B, FGTWifi-50B, FGT-60B, FGTWifi-60B to C1 list.
- Add Basic and Advanced View Mode. Default Basic. 'BasicViewMode=true' added to FirePlotter.ini.
- Added 'Fortigate-5001' to C3 list.
- Change Watch only mode startup dialog to include 'Advanced View Mode '.
- Change from 'Active Filters' to 'Filters' in status bar.
Bug Fixes:
- PIX 8 wasn't reading in version information correctly as yet again CR LF at end of lines have changed.

July 2007 - FirePlotter 1.2.0 b070721 released.

Improvements:
- Change Default View to sort by Direction then Service/Dest Prt rather than In Bytes/s.
- Change commented out Auto-Connect parameter in INI to true.
Bug Fixes:
- Increase the buffer from 1024 to 4096 in the routine that handles the ASA/PIX login as large disclaimers banners were causing a connection failure.

March 2007 - FirePlotter 1.2.0 b070320 released.

Improvements:
- Add support for Cisco ASA-5505, ASA-5505-K8, ASA-5510, ASA-5510-K8, ASA-5520, ASA-5520-K8, ASA-5530, ASA-5530-K8, ASA-5540, ASA-5540-K8, ASA-5550, ASA-5550-K8.
- Add message if FP switches to Unlicensed mode if fw Class higher than license.
- Add 'Default view' button to main dialog.
- Add Right Mouse Click Options.
- Manage Firewall via HTTP or HTTPS.
- If PIX then allow to view the configuration.
- If on Source or Destination IP and not ... allow Ping, TraceRt and HTTP to IP.
- Move Block and Session % download into 'Next update' status bar panel.
- Force immediate Refresh after connection so Table counter show values ASAP.
Bug Fixes:
- If unlicensed ExternalInterface parameter was still read from fireplotter.ini.
- Fixed problem where Session could would count I extra line if last in list.
- 'Refresh' moved on screen resize.
- Table and graph are now cleared when connecting to another firewall and an error (user etc) occur.

Feb 2007 - New FirePlotter logo design completed

Nov 2006 - FirePlotter website active

 

 

© 2000-2008 GISS (UK) Ltd