Security Center – Firewall & Traffic Monitor for Perfex CRM

Note: This is a module for Perfex CRM. It is not a standalone application.

Bring real-time HTTP traffic visibility and practical application-level protection to your Perfex CRM. Security Center helps administrators monitor incoming requests, review suspicious activity, configure automatic limits, and manage IP, CIDR, whitelist, and country access rules from one organized admin panel.

Monitor requests, understand unusual activity, and manage access without searching through raw server logs.

Performance-focused architecture:

Static assets are skipped by default, firewall data uses short-lived caches, country information is resolved in bounded cached batches, and old logs can be removed automatically by the standard Perfex cron.

Key Features

• Security Dashboard: Review total requests, suspicious requests, unique IP addresses, average response time, hourly traffic, HTTP status distribution, top IPs, and top countries for the last 24 hours.
• Live Traffic Monitor: Inspect request time, IP address, country, method, URL, AJAX state, HTTP status, response time, risk level, matched rule, authenticated staff member, and customer information.
• Automatic Refresh: Keep the Live Traffic table updated automatically without manually refreshing the page.
• Direct Page Links: Open normal application pages from Live Traffic. Links are intentionally hidden for AJAX requests.
• Advanced Traffic Filters: Filter by date range, IP, country, HTTP status, URL, staff member, risk level, and matched rule.
• Suspicious Request Logs: Review requests that matched a security signature or were rejected by an active firewall rule.
• Automatic Suspicious-IP Blocking: Configure how many suspicious requests are allowed within the detection window and how long an automatic block remains active.
• Request Rate Limiting: Set the maximum number of requests permitted per IP within a configurable time window.
• IP & CIDR Firewall: Add manual IPv4, IPv6, and CIDR blocks with reasons and optional expiration dates.
• IP Whitelist: Allow trusted addresses and networks to bypass country restrictions, rate limits, and automatic blocks.
• Country-Based Access Rules: Restrict selected countries after the visitor’s public IP country has been resolved and cached.
• Lockout Protection: Prevent administrators from saving an IP or CIDR rule that blocks the address/network used by their current request.
• HTTP Status Code Guide: Built-in explanations make codes such as 200, 303, 307, 403, 429, and 500 easier to understand.
• URL Logging Exclusions: Exclude exact application paths from routine logging. Suspicious, blocked, fatal, and HTTP 5xx requests remain available for review.
• Staff Logging Exclusions: Choose staff members whose authenticated activity should not appear in Live Traffic while firewall and threat checks remain active.
• Automatic Data Retention: Choose how many days records are retained and let Perfex cron remove expired rows in bounded batches.
• Granular Staff Permissions: Assign Dashboard, Live Traffic, Attack Logs, Firewall, Settings, and log deletion permissions separately.