You could have the two different fws in separate displays by creating filters and then manipulate them within actions..
Sridhar,
Just to elaborate on the previous post:
Rule "From FW 172.16.1.21"Filters+- IP Address : Simple, Include "172.16.1.21"Actions+- Display "172.16.1.21"
Rule "From FW 172.16.1.22" Filters+-IP Address : Simple, Include "172.16.1.22"Actions+-Display "172.16.1.22"
To save the logs, add a "Log to File" action to each rule, eg:
Rule "From FW 172.16.1.21"Filters+- IP Address : Simple, Include "172.16.1.21"Actions+- Display "172.16.1.21"+- Log to File "C:\Program Files\Syslogd\Logs\FW_%HostName.txt"
Within the win32 UI, if I understand what you are saying, I believe the answer is no. Now we have added a web console in a newer version and within here you can build filters, which I believe would scratch the itch. Have you installed the evaluation for the latest version and seen this?