5.9
Security Log
The security log displays a list of firewall-related events, including attempts
to establish inbound and outbound connections, attempts to authenticate at an
administrative interface (GlobeSurfer 3G management console or Telnet termi-
nal), firewall configuration and system start-up.
Figure 5.20: Security Log
To view the Security Log, select the
Security Log
tab which appears on the
Se-
curity
screen (see figure
5.20
).
The columns of the Security Log table show the following information:
Time
The time the event occurred.
Event
There are five kinds of events:
• Inbound traffic: The event is a result of an incoming packet.
• Outbound traffic: The event is a result of outgoing packet.
• Firewall setup: Configuration message.
• WBM Login: Indicates that a user has logged in to WBM.
• CLI Login: Indicates that a user has logged in to CLI (via Telnet).
Event type
Textual description of the event (see full description below).
• Blocked: Means that the packet was blocked. Message is colored
red.
• Accepted: Means that the packet was accepted. Message is colored
green, e.g.
User authentication success
.
Details
More details about the packet or the event, Such as protocol, IP ad-
dresses, ports, etc.
The following are the available event types that can be recorded in the firewall
log:
1. Firewall internal - from the firewall internal mechanism, in case this event-
type is recorded, an accompanying explanation will be added.
126