Log Categories
You may define which log messages appear in the SonicWALL Event Log. All Log
Categories are enabled by default except Network Debug.
•
System Maintenance
When enabled, log messages showing general system activity, such as
administrator logins, automatic downloads of the Content Filter Lists, and
system activations, is displayed.
•
System Errors
When enabled, log messages showing problems with DNS, E-mail, and automatic
downloads of the Content Filter List are displayed.
•
Blocked Web Sites
When enabled, log messages showing Web sites or newsgroups blocked by the
Content Filter List or by customized filtering are displayed.
•
Blocked Java, ActiveX, and Cookies
When enabled, log messages showing Java, ActiveX, and Cookies, which are
blocked by the SonicWALL, are displayed.
•
User Activity
When enabled, log messages showing successful and unsuccessful login attempts
are displayed.
•
VPN TCP Stats
•
Attacks
When enabled, log messages showing Denial of Service attacks, such as SYN
Flood, Ping of Death, and IP spoofing, are displayed.
•
Dropped TCP
When enabled, log messages showing blocked incoming TCP connections are
displayed.
•
Dropped UDP
When enabled, log messages showing blocked incoming UDP packets are
displayed.
•
Dropped ICMP
When enabled, log messages showing blocked incoming ICMP packets are
displayed.
•
Network Debug
When enabled, log messages showing NetBIOS broadcasts, ARP resolution
problems, and NAT resolution problems are displayed. Network Debug is
intended for experienced network administrators.
•
Denied LAN IP
Page 54 LOGGING AND ALERTING