Back to all guides

Monitoring and diagnostics

Understand Connections, Discovery, and Activity

Inspect recorded connections, discover apps without rules, and separate network records from Antify operational events.

Connections is about network traffic. Activity is about events inside Antify. They answer different questions and should not be treated as the same log.

01

What Connections shows

Connections records network activity while Logging is enabled. You can search by app or destination and inspect whether a record used Proxy, Direct, Blocked, or failed.

Turning Logging off reduces recording overhead while traffic still follows its rules. Clear removes connection records only; it does not delete proxies or rules.

02

Why some Direct traffic is absent

A rule explicitly set to Direct lets traffic fully bypass AntifyCore, so those connections do not continue to appear in normal logs and statistics.

That is not identical to a Direct fallback inside Discovery. When interpreting a record, check whether a rule matched and which Action is displayed.

03

Use Discovery to find an unconfigured app

  1. 1

    Enable Discovery

    Turn on Discovery in Connections. On first use, choose the fallback for unmatched traffic: Proxy, Block, or Direct.

  2. 2

    Reproduce the network action

    Return to the target app, perform the action you need to inspect, then search by app name or destination.

  3. 3

    Create a rule from the record

    Use Add Rule on an unmatched record. Antify carries the app identifier and available path into the rule form.

  4. 4

    Turn it off when finished

    Discovery observes more traffic. Disable it after diagnosis to return to a lighter everyday state.

04

What Activity records

Activity records events such as app startup, proxy and rule changes, Configuration switches, setting changes, and runtime warnings. It is not a destination-domain list.

You can search, filter by level, refresh, clear, or export. Activity is the better place to answer “when did the Configuration switch?” or “was this proxy just edited?”

05

Hostname filters and encrypted DNS

If a rule filters by hostname and the app uses encrypted DNS, Connections warns you here: it may not see the original hostname and can match only by IP and port. Use an IP range rule instead, or turn off Secure DNS for that app.