Page69
EventTyp es
Thesecuritylogsrecordsth efollowingeventtypes:
• Accesscontrol–apackethasbeenaccep ted/blocke dduetoanaccess controlrule.
• Advancefilterrule –apackethasbeenaccepted/b locked duetoan adva n ce dfilter
rule.
• ARP–anARPpackethasbeenaccep ted.
• AUTH:113re quest
‐an outboundpacketforAUTHprotocolhasbeenaccepted (for
maximumsecurityleve l ) .
• Broadcast/Multicastp rotection–apacketwith abroadcast/multicastsource IPhas
beenblocked.
• Defaultpolicy–apackethasbe enaccepted/blockedaccordingtothedef aultpolicy.
• Defragmentat ion failed–thefragment has b eenstored
inmemo ryandblocked
untilallfra gmentshavearrivedan d defragmentationcanbeperformed.
• DHCPrequest–yourGatewaysentaDHCPreq uest(dependson thedistribution).
• DHCPrespon se‐yourGatewaysentaDHCPresponse(d ependsonth edistribution).
• Echo/Chargen/Quote/Snorkprotection–apackethasbeenblockeddu e
to
Echo/Chargen/Quote/Snorkprotection.
• Firewallinternal–fromthefirewallinternalmechan ism,eventtypeis recordedand
anaccompan yingexp lan at i onwillbeadded.
• Firewallruleswerechan ged–therulesethasbee nmodi fied.
• Firewallstatuschan ge d–thefirewallstatuschan ge dfromuptodown orvice
versa,
asspe cifiedintheeventtypedescription.
• Firstpacketinconne ctio nisnotaSYNpacket–apackethasbeen blockedduetoa
TCPconne ctionthatstartedwith outaSYNpacket.
• Fragmentedpacket–afragmenthasbeenrejected.
• Fragmentedpacket,badalign–a
packethasbeenblockedbecause,after
defragmentation,thepacketwasbadlyaligned.
• Fragmentedpacket,headertoobig–a packethasbeenblockedbecause,after
defragmentation,theheaderwastoobig.
• Fragmentedpacket,headertoosmal l–apackethasbeenblockedbecause,aft e r
defragmentation,theheaderwas
toosmall.
• Fragmentedpacket,nome mo ry – apackethasbeenblockedbecause th ereis no
memoryforfragments.
• Fragmentedpacket,overlapped–apackethasbeenblockedbecause ,af t e r
defragmentation,therewereoverlappingfragments.
To Next Page
