You can also search for info on that port online, since some ports are associated with certain common uses. Since a mistake in the next step can mess up your network connectivity or security, only continue once you're confident you've found the right log entry.'src-port' stands for 'source port' this is not relevant in most cases X Research source.'dst-port' stands for 'destination port' - most likely what your firewall is looking for.

(Your firewall needs to know which of these protocols is being used to govern data transmission.

'Protocol' typically lists either TCP or UDP.

'Action' lists the firewall's behavior.

Fortunately, you can ignore most of this info and look for the following: X Research source Use the Fields line at the top as a guide for how to read the log entries (for example, the Fields line starts with 'date time', so the first two items in each entry are the date and time of the event). Many of our customers take a defense in depth approach to secure workloads within their Amazon Virtual Private Clouds (Amazon VPC).Using domain list rules in AWS Network Firewall and Amazon Route 53 Resolver DNS Firewall lets you enforce network security controls at multiple layers based on domain names.