Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 753 / 861

752 Field descriptions
System field descriptions
License Reports Sends messages that are generated as a result of license installation and removal
to SESA.
This option is checked by default.
Configuration Modification
Reports Sends events that are generated by configuration modifications to SESA.
This option is checked by default.
Configuration Activation
Reports Sends events that are generated by the activation of new configurations to SESA.
This option is checked by default.
Additional Reports Sends events that generated as the result of unauthorized processes and users to
SESA.
This option is checked by default.
Authentication Failure Reports Sends events that are generated by failed attempts to login are sent to SESA.
This option is checked by default.
Remote Connection Reports Sends events that are generated when users make a remote connection to the
security gateway to SESA.
This option is checked by default.
Possible Attack Reports Sends events that are generated by attacks to SESA.
This option is checked by default.
Content Security Reports Sends events that are generated by content security violations to SESA.
This option is checked by default.
Intrusion Detection Reports Sends events that are generated by intrusion detection violations to SESA.
This option is checked by default.
Client Compliance Reports Sends events that are generated by client compliance violations to SESA.
This option is checked by default.
VPN Traffic Reports Sends events that are generated by VPN traffic to SESA.
This option is unchecked by default because VPN traffic events cannot be
consolidated and may overwhelm SESA.
VPN Error Reports Sends VPN error events to SESA.
This option is checked by default.
Message Send Rate Number of seconds to define the length of the message period if message
consolidation is enabled for network traffic reports or denied access reports.
This is the amount of time to wait be before generating a set of new messages to
send to SESA.
This value must be an integer between 0 and 9999.
The default value is 600 seconds (10 minutes).
URL Tracking Limit Maximum number of Web sites tracked during the message period, if message
consolidation is enabled for network traffic reports or denied access reports.
When this limit is exceeded, some URLs are dropped.
This value must be an integer between 0 and 9999.
The default value is 100 Web sites.
Table D-236
SESA Event Gating window
Field Description