Manual Validation

The Manual Entry tab lets you validate individual network flows against all enabled compliance frameworks and receive a composite risk score with per-framework findings.

Entering a flow

Fill in the following fields:

The Application/Business Purpose field is optional but recommended - it documents why the flow exists and appears in exported results.

Port field formats

The port field accepts several input formats:

• Single port - 443
• Port range - 8080-8090
• Comma-separated - 80,443,8080
• Any/all - type any or all to match all ports

When ICMP is selected as the protocol, the port field is replaced with ICMP type checkboxes (echo request, echo reply, destination unreachable, and others).

Service name autocomplete

Typing a service name in the port field triggers autocomplete from a database of 217 known services. For example, typing SSH auto-fills port 22 and sets the protocol to TCP. See Service Autocomplete for details.

Multiple flows

Click Add another to queue up to 10 flows for simultaneous validation. Each flow is validated independently and results appear in a scrollable list.

Reading the results

Each validated flow displays a risk score (0-100) with a color-coded severity label:

• Low
  (0-29) - No significant compliance issues.
• Medium
  (30-59) - Partial compliance match. Investigate before approving.
• High
  (60-79) - Compliance violations detected. Remediate.
• Critical
  (80-100) - Severe risk. Block or remediate immediately.

Zone badges

When zones are configured, source and destination fields display zone badges indicating which zone each IP belongs to. The zone-to-zone policy contributes to the overall risk score.