ProSecure Unified Threat Management UTM10 or UTM25 Reference Manual
Monitoring System Access and Performance
11-5
v1.0, September 2009
Configuring Logging, Alerts, and Event Notifications
By default, the UTM logs security-related events such as accepted and dropped packets on
different segments of your LAN, denied incoming and outgoing service requests, hacker probes
and login attempts, content filtering events such as attempts to access blocked sites and URLs,
unwanted e-mail content, spam attempts, and many other types of events. You can configure the
UTM to e-mail logs and alerts to a specified e-mail address.
To receive the logs in an e-mail message, the UTM’s e-mail notification server must be configured
and e-mail notification must be enabled. If the e-mail notification server is not configured or
e-mail notification is disabled, you can still query the logs and generate log reports that you then
can view on the Web Management Interface screen or save in CSV format.
For more information about logs, see
“Querying Logs and Generating Reports” on page 11-32
.
Configuring the E-mail Notification Server
The UTM can automatically send information such as notifications and reports to the
administrator. You must configure the necessary information for sending e mail, such as the
administrator’s e-mail address, the e-mail server, user name, and password.
To configure the e-mail notification server:
1.
Select
Network Config
>
Email Notification
from the menu. The Email Notification screen
displays (
Figure 11-3
shows some examples).
Figure 11-3