ZyWALL 2 and ZyWALL 2WE
Chapter 18
Centralized Logs
This chapter contains information about configuring general log settings and viewing the ZyWALL’s logs. Refer to the appendices for example log message explanations and how to view the logs via the SMT command interpreter interface.
18.1 Introduction to Centralized Logs
You can select which logs you want the ZyWALL to record and which alerts you want the ZyWALL to send. You can look at the desired logs in one location. You can also have the ZyWALL record and display statistical data about Internet usage, including what web sites were visited how many times, what protocols or service ports have been used and how much traffic has gone between individual LAN IP addresses and the WAN.
18.1.1 Alerts and Logs
An alert is a type of log that warrants more serious attention. They include system errors, attacks (access control) and attempted access to blocked web sites or web sites with restricted web features such as cookies, active X and so on. Some categories such as System Errors consist of both logs and alerts. You may differentiate them by their color in the View Log screen. Alerts display in red and logs display in black.
18.2 View Log
Click the Logs link in the navigation panel to open the View Log screen.
Use the View Log screen to see the logs for the categories that you selected in the Log Settings screen (see section 18.3). Options include logs about system maintenance, system errors, access control, allowed or blocked web sites, blocked web features (such as ActiveX controls, java and cookies), attacks (such as DoS) and IPSec.
Centralized Logs |