Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 785 / 1016

Forwarding Self Log Entries (Firewall Options)
Self log entries typically display information on traffic that was dropped by the managed
device or terminates on the device. Any packet that terminates at the device generates
a self log entry; Telnet, Ping, BGP, and OSPF connections all terminate at the device, and
trigger a self log entry.
A self log includes the date and time a packet was dropped, the source address of the
packet, the destination address of the packet, the duration for which the packet was
active, and the service associated with the packet. You can disable or enable logging of
dropped packets for specific traffic types, including ICMP, IKE, SNMP, and multicast
packets.
To configure self log entries, open a device configuration and select Report Settings >
General . Click the Firewall Options tab and configure the following settings. See Table
94 on page 735.
Table 94: Self Log Entry Settings
Description Setting
Creates a log entry for an ICMP (ping) packet that was dropped
or terminated at the device. Log ICMP Packets to Self
Creates a log entry for an IKE packet that was dropped or
terminated at the device. When negotiating an IKE key, the VPN
client communicates with the security device. Log IKE Packets to Self
Creates a log entry for an SNMP packet that was dropped or
terminated at the device. Log SNMP Packets to Self
Creates a log entry for a multicast packet that was dropped or
terminated at the device. Log Multicast Packets to Self
Configuring e-mail Server Settings
Use the Email option to configure a managed device to send messages using e-mail
whenever a system event of Emergency, Alert, Critical, or Notification severity level occurs.
You can configure the e-mail and SMTP settings at the device level, or skip this section
and configure the GUI server to handle e-mail; see “Exporting to E-mail” on page 788.
To configure e-mail server settings and enable the device to send e-mail messages, open
a device configuration and select
Report Settings > Email . Configure the following
settings. See Table 95 on page 735.
Table 95: Email Server Settings for Log Entries
Description Setting
When alarm is enabled for a rule in the installed security policy
and traffic matches the rule, the device sends an e-mail
notification to the specified SMTP server. Enable Notification for Alarms
735 Copyright © 2010, Juniper Networks, Inc.
Chapter 19: Logging