82
C
HAPTER
4: C
OMMAND
R
EFERENCE
Logs and Alerts
The Internet Firewall maintains an event log, which
contains events that may be security concerns. You can
view this log with a browser using the Internet Firewall
management interface or you set up an a tab-delimited
text file to be sent automatically and periodically to any
e-mail address for convenience and archival purposes.
If you want to be alerted of high-priority information, such
as an attack on a server, you can specify that this
information is immediately e-mailed, either to the main
e-mail address used by the log, or to a different address,
such as a paging service.
The Internet Firewall logs the following events:
■
Unauthorized connection attempts
■
Blocked Web, FTP and Gopher sites, and blocked NNTP
Newsgroups
■
Blocked ActiveX and Java
■
Blocked Cookies and Proxy attempts
■
Attacks such as IP spoofing, Ping of Death, SYN flood
■
Administrator logins
■
Successful/unsuccessful loading of the Web Site Filter
Viewing the Log
Click
Log
and then select the
View Log
tab. A window
similar to that in Figure 33
is displayed.
To Next Page