Chapter 20 Logs
20.4 Config Log
The Config log stores a complete communication history between Administration Con- sole and the WinRoute Firewall Engine — the log allows you to find out what administra- tion actions were performed by which user, and when.
The Config window contains three log types:
1.Information about user logins/logouts to/from the WinRoute’s administration Example:
[18/Apr/2003 10:25:02] james - session opened for host 192.168.32.100
[18/Apr/2003 10:32:56] james - session closed for host 192.168.32.100
•[18/Apr/2003 10:25:02] — date and time when the record was written to the log
•jsmith — the login name of the user logged in the WinRoute administration
•session opened for host 192.168.32.100 — information about the begin- ning of the communication and the IP address of the computer from which the user connected
•session closed for host 192.168.32.100 — information about the end of the communication with the particular computer (user logout or Administration Console closed)
2.Configuration database changes
Changes performed in the Administration Console. A simplified form of the SQL language is used when communicating with the database.
Example:
[18/Apr/2003 10:27:46] jsmith - insert StaticRoutes set Enabled=’1’, Description=’VPN’, Net=’192.168.76.0’, Mask=’255.255.255.0’, Gateway=’192.168.1.16’, Interface=’LAN’, Metric=’1’
•[18/Apr/2003 10:27:46] — date and time when the record was written
•jsmith — the login name of the user logged in the WinRoute administration
