Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 754 / 861

753 Field descriptions
System field descriptions
URL Send Limit Maximum number of Web sites to include in the event data that is sent at the end
of the message period, if message consolidation is enabled for network traffic
reports or denied access reports.
The URL send limit must be less than URL tracking limit.
This value must be an integer between 0 and 9999.
The default value is 50 Web sites.
IP Tracking Limit Maximum number of IP addresses tracked during the message period, if message
consolidation is enabled for network traffic reports or denied access reports.
When this limit is exceeded, some URLs are dropped.
This value must be an integer between 0 and 9999.
The default value is 100 IP addresses.
IP Send Limit Maximum number of IP addresses to include in the event data that is sent, if
message consolidation is enabled for network traffic reports or denied access
reports.
The IP send limit must be less than the IP tracking limit.
This value must be an integer between 0 and 9999.
The default value is 50 IP addresses.
Network Traffic Reports Consolidation level of events generated by network traffic.
Select one of the following to set the consolidation level:
■
Consolidated
Events generated by network traffic are tallied during the time period
specified for the Message Send Rate. At the end of this period, a single
message summarizing the tally is sent to SESA.
■
Not Consolidated
All events generated by network traffic are sent to SESA.
Sending all events to SESA can affect performance on some SESA servers.
You can select Not Consolidated for a specific length of time to sample
traffic during that period, but you should return this setting to Consolidated
for daily use.
■
None
No events generated by network traffic are sent to SESA.
The default is Consolidated.
Denied Access Reports Consolidation level of events generated when access to the security gateway is
denied.
Select one of the following to set the consolidation level:
■
Consolidated
Events generated by access denials are tallied during the time period
specified for the Message Send Rate. At the end of this period, a single
message summarizing the tally is sent to SESA.
■
Not Consolidated
All events generated by access denials are sent to SESA.
Sending all events to SESA can affect performance on some SESA servers.
You can select Not Consolidated for a specific length of time to sample
traffic during that period, but you should return this setting to Consolidated
for daily use.
■
None
No events generated by access denials are sent to SESA.
The default is Consolidated.
Table D-236
SESA Event Gating window
Field Description