Items under the Diagnostics menu perform various diagnostic and administrative tasks.

ARP Table

Displays a list of devices as seen locally by the firewall. The list includes an IP address, MAC address, Hostname, the Interface where the device was seen, and other related information.

See ARP Table.


Tests authentication to a defined RADIUS or LDAP server.

See Troubleshooting Authentication.

Backup & Restore

Backup and restore configuration files.

See Backup and Recovery.

Command Prompt

Execute shell commands or PHP code, and upload/download files to/from the firewall.


Use with caution

See Command Prompt.

DNS Lookup

Executes a DNS lookup to resolve hostnames for diagnostic purposes, and to test connectivity to DNS servers.

See DNS Lookup.

Edit File

Edit a file on the firewall filesystem.

See Editing Files on the Firewall.

Factory defaults

Resets the configuration back to default. Be aware, however, that this does not alter the filesystem or uninstall package files; it only changes configuration settings.

See Resetting to Factory Defaults.

GEOM Mirrors

If the firewall contains a GEOM disk mirror, this page shows the status of the mirror and provides controls for managing the mirror.

Halt system

Shuts down the firewall and turns off the power where possible.

See Halting and Powering Off the Firewall.

Limiter Info

Shows the status of any Limiters and the traffic flowing inside them.

See Checking Limiter Usage.

NDP Table

Shows a list of local IPv6 devices as seen by the firewall. The list includes an IPv6 address, MAC address, hostname (if known to the firewall), and the interface.

See NDP Table.

Packet Capture

Perform a packet capture to inspect traffic, and then view or download the results.

See Packet Capture GUI.


Displays statistics about the packet filter, including general traffic rates, connection rates, state table info, and various other counters.

See pfInfo.


Displays a list of the top active connections by a selectable metric such as bytes, rate, age, etc.

See pfTop.


Sends ICMP echo requests to a given IP address, sent via a chosen interface.

See Ping Host.


Reboots the firewall. This can take several minute to complete, depending on the hardware and enabled features.

See Rebooting the Firewall.


Shows the contents of the routing table.

See Route Table Contents.

SMART Status

Displays diagnostic information about disk drives, if supported by the hardware. Can also run drive tests.

See S.M.A.R.T. Hard Disk Status.


Displays a list of processes on the firewall that are bound to network ports, listening for connections or making connections outbound from the firewall itself.

See Viewing Active Network Sockets.


Shows the currently active firewall states.

See Viewing Firewall States in the GUI.

States Summary

Displays information about the state table, to see activity summarized by IP address.

See Firewall States Summary.

System Activity

Shows memory usage and a list of active processes and system threads on the firewall, the output is from top -aSH .

See System Activity (Top).


Displays and edits the contents of various firewall tables and aliases.

See Firewall Table Contents.

Test Port

Performs a simple TCP connection test from the firewall to determine if a remote host is accepting connections on a specified port.

See Testing a TCP Port.


Trace the route taken by packets between this firewall and a remote system.

See Traceroute.