D-Link DFL-1100 Installation Manual page 16

DFL-1100 Installation Guide
Logging
To go to the logging configuration screen, select the System
tab and click on the Logging button.
Logging allows you to track events such as startup,
shutdown, and the opening and closing of connections.
The startup and shutdown events are always logged.
Events such as the opening and closing of allowed
connections are user configurable. The DFL-1100 sends
the log data to one or two Syslog servers. An e-mail alert
for IDS/IDP events can be generated for up to three e-mail
addresses.
To Enable Logging
1. Place a checkmark in the Syslog box.
2. Enter the name of your first Syslog server in the Syslog server 1 text box. If you have a second Syslog server, enter
the server name in the Syslog server 2 text box. At least one Syslog server must be entered for logging to work.
3. Specify what facility to use by selecting the appropriate Syslog facility. The Syslog facility is a label to identify where a
message originated from. The facility value is used by the PC running the Syslog Daemon to sort messages. Local0
is the default value, as this is the usual value assigned to a firewall.
4. Click Apply to apply the settings or click Cancel to disregard the changes.
To Enable Audit Logging
To start auditing all firewall traffic, simply place a checkmark in the Enable audit logging box. Be sure to click Apply
to apply the setting or click Cancel to discard the changes.
To Enable E-mail alerting for IDS/IDP events
1. Place a checkmark in the Enable E-mail alerting for IDS/IDP events box.
2. Select a Sensitivity level. There are five levels of sensitivity for IDS/IDP e-mail reporting. Very High (top level) will
issue an e-mail alert for any type of attack in the IDS signature file. Lower sensitivity settings will reduce the amount
of e-mail alerts but will not reduce the level of IDS protection.
3. In the SMTP Server field, type in the address of the SMTP server that the DFL-1100 should use to send e-mail.
4. The DFL-1100 will send out e-mail alerts to up to 3 valid e-mail addresses. Enter the e-mail addresses in the appropriate
textbox.
5. Click Apply to apply the settings or click Cancel to disregard the changes.
16
Logging