Manuals / SonicWALL / Household Appliance / Home Security System

SonicWALL 3 manual Alerts & Snmp Traps

Models: 3

1 348

Download 348 pages 8.9 Kb

Page 321

CHAPTER 50: Specifying Log Categories

Logs Java, ActiveX, and Cookies blocked by the SonicWALL security appliance.

•User Activity

Logs successful and unsuccessful log in attempts.

•VPN TCP Stats

Logs TCP connections over VPN tunnels.

•System Environment (PRO 3060)

Logs events about fan failure, overheating, and any hardware issues.

•Attacks

Logs messages showing Denial of Service attacks, such as SYN Flood, Ping of Death, and IP spoofing.

•Dropped TCP

Logs blocked incoming TCP connections.

•Dropped UDP

Logs blocked incoming UDP packets.

•Dropped ICMP

Logs blocked incoming ICMP packets.

•Network Debug

Logs NetBIOS broadcasts, ARP resolution problems, and NAT resolution problems. Also, detailed messages for VPN connections are displayed to assist the network administrator with troubleshooting problems with active VPN tunnels. Network Debug information is intended for experienced network administrators.

•Denied LAN IP

Logs all LAN IP addresses denied by the SonicWALL security appliance.

Alerts & SNMP Traps

Alerts are events, such as attacks, which warrant immediate attention. When events generate alerts, messages are immediately sent to the e-mail address defined in the Send alerts to field. Attacks and System Errors are enabled by default, Blocked Web Sites and VPN Tunnel Status are disabled.

•Alert all Categories

Select Alert all Categories to begin logging of all alert categories.

•Attacks

Log entries categorized as Attacks generate alert messages.

•System Errors

Log entries categorized as System Errors generate alert messages.

•Blocked Web Sites

Log entries categorized as Blocked Web Sites generate alert messages.

•VPN Tunnel Status

Log entries categorized as VPN Tunnel Status generate alert messages.

•System Environment (PRO 3060)

Logs events about fan failure, overheating, and any hardware issues.

Once you have configured the Log Categories window, click Apply. Once the SonicWALL security appliance is updated, a message confirming the update is displayed at the bottom of the browser window.

302	SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE

Image 321

SonicWALL 3 manual Alerts & Snmp Traps

Contents

SonicOS Standard Administrators Guide Table of Contents Part 2 System Part 3 Network Part 4 Modem Part 5 Wireless Part 8 VPN Vii Configuring Site to Site VPN Policies UsingViii Part 9 UsersPart 11 Log Index Preface Copyright NoticeTrademarks Xii Limited WarrantyPage Organization of this Guide Part 9 Users Part 10 Security ServicesPart 11 Log About this GuideIcons Used in this Manual Guide ConventionsSonicWALL Technical Support More Information on SonicWALL Products and ServicesNorth America Telephone Support International Telephone SupportXviii Current DocumentationIntroduction Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide What’s New in SonicOS Standard IntroductionSonicWALL Management Interface SonicWALL Management Interface Navigating the Management InterfaceStatus Bar Applying ChangesNavigating Tables Common Icons in the Management Interface Getting HelpLogging Out Introduction SonicWALL Security Appliance Configuration Steps Basic SonicWALL Security Appliance SetupInternet Service Provider ISP Information Collecting Required ISP InformationIf You Have DSL Other InformationIf You Have a Static IP Address SonicWALL Management InterfaceSonicWALL TZ 170 SP Using the SonicWALL Setup WizardConfiguring a Static IP Address Internet Connection SonicWALL TZ 50 Wireless/TZ 150 Wireless/TZ 170 WirelessUsing the SonicWALL Setup Wizard Configuring a PPPoE Internet Connection Configuring a Dhcp Internet ConnectionConfiguring Pptp Internet Connectivity Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Configuring the TZ 170 SP using the Setup Wizard Changing the Password Welcome to the SonicWALL Setup WizardConfiguring the WAN Network Mode Selecting the Deployment ScenarioConfiguring LAN Settings Configuring WAN SettingsConfiguring LAN Dhcp Settings Configuring Wlan 802.11b/g SettingsConfiguring the LAN Settings Configuring the LAN Dhcp SettingsConfiguring Wlan 802.11b Settings Configuring the WAN Network Mode Configuring the TZ 170 Wireless as a Secure Wireless Bridge Configuring Secure Wireless Bridge Settings Configuring Wlan Network SettingBefore You Register Registering Your SonicWALL Security ApplianceRegistering Your SonicWALL Security Appliance Registering Your SonicWALL Security ApplianceSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide System Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Viewing System Status Information System StatusSystem Status Wizards System MessagesSystem Information Latest Alerts Security ServicesSonicWALL TZ 150 Wireless SonicWALL TZ 50 WirelessNetwork Interfaces SonicWALL Security Appliance Model Interfaces SonicWALL TZSystem Licenses System LicensesSystem Licenses Node License Status Currently Licensed NodesNode License Exclusion List Security Services Summary Manual Upgrade for Closed Environments Manage Security Services Online Manual UpgradeFrom a Computer Connected to the Internet System Licenses Using System Administration System AdministrationSystem Administration Name/Password Login SecurityFirewall Name Web Management Settings Advanced Management Enable SnmpFour addresses or host names can be used Click OKEnable Management Using SonicWALL GMS Using System Administration System Time Setting System TimeSet Time System TimeSetting the SonicWALL Security Appliance Time NTP SettingsSystem Settings Configuring System SettingsSettings Import SettingsClick Export Settings Export SettingsFirmware Management New FirmwareSafeMode Rebooting the SonicWALL Security Appliance Firmware Management SettingsSystem Information Firmware Management System Diagnostics System DiagnosticsGenerating a Tech Support Report Tech Support ReportDiagnostic Tools Active Connections Monitor SettingsActive Connections Monitor DNS Name Lookup CPU MonitorPacket Trace Find Network PathSelect Packet Trace from the Diagnostic tool menu Reverse Name Resolution PingProcess Monitor System Restart Network Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Configuring Network Settings Network SettingsNetwork Settings Interfaces Setup WizardInterface Options by SonicWALL Security Appliance DNS SettingsConfiguring Transparent Mode Configuring the WAN InterfaceConfiguring the WAN Interface Configuration ExampleConfiguring NAT with Dhcp Client Configuring NAT EnabledConfiguring NAT with L2TP Client Configuring NAT with PPPoE ClientConfiguring Ethernet Settings in WAN Properties Configuring NAT with Pptp ClientConfiguring the WAN Interface Configuring the LAN Interface Basic LAN ConfigurationConfiguring Multiple LAN Subnets Configuring the OPT Interface Configuring Ethernet SettingsConfiguring the OPT Interface Configuring Transparent Mode Configuring NAT Mode Configuring the DMZ InterfaceConfiguring the DMZ Interface Select OPT in NAT ModeConfiguring Transparent Mode Configuring the Modem Interface TZ 170 SP Configuring the Modem Interface TZ 170 SPSelect DMZ in NAT Mode Profiles Modem SettingsFailover Select Enable WAN FailoverActivating the Modem AdvancedSonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Sonicwall Sonicos Standard 3.0 ADMINISTRATOR’S Guide Select the Enable One-to-One NAT check box Configuring One-to-One NATNetwork One-to-One NAT Network One-to-One NATOne-to-One NAT Configuration Example Select Enable One-to-One NATClick Firewall, then Access Rules Allow Service Http Source WAN Configuring One-to-One NAT Configuring Web Proxy Settings Network Web ProxyNetwork Web Proxy Configuring Automatic Web Proxy Forwarding Bypass Proxy Servers Upon Proxy FailureForward OPT/DMZ/WLAN Client Requests to Proxy Server Configuring Intranet Settings Network IntranetNetwork Intranet Intranet Settings InstallationSpecified address ranges are attached to the LAN link Specified address ranges are attached to the WAN linkConfiguring Static Routes Network RoutingNetwork Routing Static Routes Static Route Configuration ExampleKey terms SonicWALL LAN IP AddressRoute Advertisement Route Advertisement ConfigurationRouting Table Configuring Address Resolution Protocol Settings Network ARPNetwork ARP Adding a Secondary Subnet using the Static ARP Method Static ARP EntriesSecondary Subnets with Static ARP Network ARP Prohibit Dynamic ARP Entries Flushing the ARP Cache Navigating and Sorting the ARP Cache TableConfiguring Address Resolution Protocol Settings Dhcp Server Settings Configuring the Dhcp ServerNetwork Dhcp Server Network Dhcp ServerDhcp Server Lease Scopes Configuring Dhcp Server for Dynamic Ranges101 Configuring Static Dhcp EntriesCurrent Dhcp Leases Network Dynamic DNS Configuring Dynamic DNSSupported Ddns Providers Network Dynamic DNSAdditional Services offered by Dynamic DNS Providers 105 Configuring Dynamic DNS106 107 Dynamic DNS Settings Table108 109 Modem110 Modem Status Viewing Modem StatusModem Status 111Modem Status Modem Settings Configuring Modem SettingsModem Settings 113Configuring Profile and Modem Settings Modem Failover Settings Configuring Modem FailoverModem Failover Modem FailoverConfiguring Modem Failover Modem Advanced Modem Advanced117 Configuring Advanced Modem Settings Modem Dialup Profiles Configuring Modem Dialup PropertiesDial-Up Profiles Modem Dialup ProfilesConfiguring a Dialup Profile Modem Dialup Profiles Modem Profile Configuration121 Modem Dialup Profiles Modem Profile Configuration122 123 Chat ScriptsCustom Chat Scripts 125 Wireless126 127 LAN WANConsiderations for Using Wireless Connections Wireless Guest Services WGS Optimal Wireless Performance RecommendationsOptimal Wireless Performance Recommendations 129Wireless Node Count Enforcement WiFiSec EnforcementMAC Filter List Welcome to the SonicWALL Wireless Configuration Wizard Using the Wireless WizardWlan Network Settings Using the Wireless WizardWlan Security Settings Wlan 802.11b SettingsWiFiSec VPN Client User Authentication Wireless Guest Services133 Updating the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless Wireless Configuration SummaryConfiguring Additional Wireless Features Wireless StatusWireless Status 135Access Point Status Wlan SettingsWlan Statistics Station Status137 138 Wireless Settings Configuring Wireless SettingsWireless Radio Mode Wireless SettingsWireless Settings 141 Secure Wireless Bridging TZ 170 OnlyConfiguring a Secure Wireless Bridge Network Settings for the Example Network Wireless Bridging without WiFiSec143 Select LAN for VPN Terminated at Advanced Configuration for both VPN Policies145 Wireless Bridge VPN Policy146 Wireless WEP/WPA Encryption Configuring WEP and WPA EncryptionWireless WEP/WPA Encryption 147WEP Encryption Settings WPA Encryption SettingsWEP Encryption Keys WPA-PSK Settings WPA-EAP Settings149 WPA Settings Wireless Advanced Wireless AdvancedBeaconing & Ssid Controls 151Wireless Client Communications Advanced Radio SettingsConfigurable Antenna Diversity TZ 170 Wireless 153 154 Wireless MAC Filter List Configuring the MAC Filter ListWireless MAC Filter List 155156 Wireless IDS Configuring Wireless IDSWireless Bridge IDS Wireless IDSEnable Client Null Probing Access Point IDSRogue Access Point Detection Association Flood Detection159 Authorizing Access Points on Your Network160 161 Wireless Guest Services162 WGS Status WGS Status163 Viewing Wireless Guest Services Status WGS Settings Configuring Wireless Guest ServicesWGS Settings 165Bypass Guest Authentication Enable Dynamic Address Translation DATBypass Filters for Guest Accounts Enable URL Allow List for Authenticated Users Enable Smtp RedirectEnable IP Address Deny List for Authenticated Users 167Check the Customize Login Page box Customize LoginMaximum Concurrent Guests Custom Post Authentication RedirectWGS Account Profiles To add a profileAccount Lifetime WGS Accounts Managing Wireless Guest AccountsWorking with Guest Accounts WGS AccountsAutomatically Generating Guest Accounts Account Detail Printing Manually Configuring Wireless GuestsAccount Profile 173Secure Access Point with Virtual Adapter Support Flexible Default Route175 Secure Access Point with Wireless Guest Services176 177 Firewall178 Network Access Rules Overview Configuring Network Access RulesNetwork Access Rules Overview 179Firewall Access Rules Using Bandwidth Management with Access RulesAdding Rules using the Network Access Rule Wizard Restoring Default Network Access RulesConfiguring a Public Server Rule Navigating and Sorting the Access Rules Table EntriesConfiguring a General Network Access Rule 183 Adding Rules Using the Add Rule Window 185 Configuring Network Access Rules Click the Bandwidth tab Rule Examples Blocking LAN Access for Specific ServicesEnabling Ping Select WAN from the Destination Ethernet menu188 Access Rules Advanced Configuring Advanced Rule OptionsWindows Networking NetBIOS Broadcast Pass Through Access Rules AdvancedAccess Rule Service Options TCP Connection Inactivity TimeoutDetection Prevention Source Routed PacketsFirewall Services Configuring Custom ServicesUser Defined Custom Services Firewall ServicesPredefined Services Firewall VoIP Configuring VoIPVoIP Protocols Firewall VoIPSIP 323SIP Settings Configuring the VoIP SettingsSettings 195196 Firewall Connections Monitor Monitoring Active Firewall ConnectionsFirewall Connections Monitor 197Using Group Filters Setting Filter LogicClick Apply Filters Source IP Priority && Category && Source && Destination199 VPN200 SonicWALL VPN Options Overview Configuring VPN SettingsSonicWALL VPN Options Overview 201VPN Settings VPN Global SettingsVPN Policies Configuring GroupVPN Policy on the SonicWALL Configuring GroupVPN Policy on the SonicWALLCurrently Active VPN Tunnels Navigating and Sorting the VPN Policies EntriesConfiguring IKE Preshared Secret 205 206 207 Configuring GroupVPN with IKE 3rd Party Certificates 209 210 211 212 Site to Site VPN Configurations Site to Site VPN ConfigurationsExport a GroupVPN Client Policy Site-to-Site VPN DeploymentsSite a VPN Planning Sheet for Site-to-Site VPN PoliciesRouter Additional Information215 Creating a Typical IKE Preshared Secret VPN Policy 217 Creating a Custom VPN Policy IKE with Preshared SecretCreating a Manual Key VPN Policy with the VPN Policy Wizard 219 220 Configuring a VPN Policy IKE with Preshared Secret Tip The Shared Secret must be a minimum of four characters221 222 223 Select Manual Key from the IPSec Keying Mode menu Configuring a VPN Policy using Manual KeyConfiguring a VPN Policy with IKE 3rd Party Certificate General tab, select IKE using 3rd Party Certificates225 226 227 228 Advanced VPN Settings Configuring Advanced VPN SettingsVPN Advanced VPN AdvancedVPN User Authentication Settings Select Enable VPN Bandwidth Management VPN Bandwidth Management231 Configuring Advanced VPN Settings Dhcp Relay Mode Configuring Dhcp Over VPNVPN Dhcp over VPN VPN Dhcp over VPNConfiguring the Central Gateway for Dhcp Over VPN 235 Configuring Dhcp over VPN Remote GatewayDevice Configuration Click OK to exit the Dhcp over VPN Configuration windowCurrent Dhcp over VPN Leases VPN L2TP Server Configuring L2TP Server SettingsVPN L2TP Server 237L2TP Server Settings IP Address SettingsAdding L2TP Clients to the SonicWALL 239 Currently Active L2TP SessionsConfiguring L2TP Server Settings Digital Certificates Overview Managing CertificatesSonicWALL Third-Party Digital Certificate Support Digital Certificates OverviewVPN Local Certificates Importing Certificate with Private KeyCertificate Details Delete This Certificate Generating a Certificate Signing RequestVPN Local Certificates Select Add New Local Certificate from the Certificates menuVPN CA Certificates Importing CA Certificates into the SonicWALLSelect Add New CA Certificate Certificate Revocation List CRL Automatic CRL UpdateImporting a CRL List Click Browse for Please select a file to import246 247 Users248 User Level Authentication Overview User Level Authentication OverviewUsers Status 249Users Settings Authentication MethodActive User Sessions Internet Authentication Exclusions Global User SettingsUsers Settings 251Acceptable Use Policy Configuring Radius Authentication Select Use Radius for user authentication253 254 255 256 Users Local Users Configuring Local UsersUsers Local Users 257Adding a Local User 259 Security Services260 SonicWALL Security Services SonicWALL Security ServicesActivating Free Trials MySonicWALL.comSecurity Services Summary Manage Licenses Security Services SummarySecurity Services Summary 263Security Services Settings Security Services InformationIf Your SonicWALL Security Appliance is Not Registered SonicWALL Content Filtering Service SonicWALL Content Filtering Service265 Security Services Content Filter Content Filter StatusActivating SonicWALL Content Filtering Service Activating a SonicWALL Content Filtering Service Security Services Content Filter267 Restrict Web Features Content Filter TypeMessage to Display when Blocking Configuring SonicWALL Filter PropertiesConfiguring SonicWALL Filter Properties Trusted DomainsCustom List Allowed/Forbidden DomainsKeyword Blocking 271 Disable all Web traffic except for Allowed DomainsConsent Consent Page URL mandatory filtering Mandatory Filtered IP AddressesAdding a New Address 273274 SonicWALL Network Anti-Virus Overview SonicWALL Network Anti-Virus Overview275 Activating SonicWALL Network Anti-Virus Security Services Anti-VirusSecurity Services Anti-Virus Activating a SonicWALL Network Anti-Virus Free Trial277 Configuring SonicWALL Network Anti-Virus Security Services E-Mail FilterSonicWALL Gateway Anti-Virus Overview Managing SonicWALL Gateway Anti-Virus ServiceSonicWALL Gateway Anti-Virus Overview 279SonicWALL Gateway Anti-Virus/Intrusion Prevention Features 281 Activating SonicWALL Gateway Anti-VirusActivating the SonicWALL Gateway Anti-Virus Activating SonicWALL Gateway Anti-VirusConfiguring SonicWALL Gateway Anti-Virus Configuring SonicWALL Gateway Anti-Virus283 284 SonicWALL Intrusion Prevention Service Managing SonicWALL Intrusion Prevention ServiceSonicWALL IPS Features SonicWALL Intrusion Prevention ServiceSonicWALL Deep Packet Inspection 287 How SonicWALL’s Deep Packet Inspection Architecture WorksActivating SonicWALL IPS Security Services Intrusion PreventionSecurity Services Intrusion Prevention Activating the SonicWALL IPS Free Trial289 290 SonicWALL Global Security Client Managing SonicWALL Global Security ClientSonicWALL Global Security Client 291Global Security Client Features How SonicWALL Global Security Client WorksSonicWALL Global Security Client Activation 293 Activating SonicWALL Global Security Client294 295 Log296 SonicOS Log Event Messages Overview Viewing Log EventsSonicOS Log Event Messages Overview 297Navigating and Sorting Log View Table Entries Log ViewRefresh SonicOS Log EntriesClear Log Mail Log300 Specifying Log Categories Log CategoriesLog Categories Alerts & Snmp Traps Log Automation Configuring Log AutomationLog Automation 303Syslog Servers Mail305 306 Log Name Resolution Configuring Name ResolutionLog Name Resolution 307Selecting Name Resolution Settings Name Resolution Method list, selectSpecifying the DNS Server Generating and Viewing Log Reports Reset DataLog Reports Data CollectionView Data Bandwidth Usage by ServiceWeb Site Hits Bandwidth Usage by IP AddressSonicWALL ViewPoint Log ViewPointLog ViewPoint 311Generating and Viewing Log Reports SonicSetup SonicSetup313 Device Selection Introduction and DiscoveryDiagnostics Diagnostics315 Diagnostic Results SonicROM RecoverySonicOS Recovery SonicOS Recovery317 Restoring Factory Defaults Address Synchronization Address Synchronization319 320 SonicWALL SafeMode SonicWALL SafeMode321 322 Upgrading SonicOS Firmware Upgrading SonicOS Firmware323 324 Numerics Index326 327 VPNWPA, see WiFiSec Protected Access 232- 000609- 00 Rev E 02/05