Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 234 / 861

234 Defining your security environment
Controlling full application inspection of traffic
Creating trace files of SMTP connections
When troubleshooting SMTP connections, you can configure the security gateway to create a separate
log file for only SMTP connections. You may want to do this if you want to track what is happening to
SMTP packets as they pass through the security gateway, or you might simply want an audit trail for
all SMTP connections.
Note: The SMTP trace file is normally written to /var/log/sg/smtpd.log.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Configuring access for inbound and outbound email” on page 229
To create trace files of potential SMTP attacks
1 In the SGMI, in the left pane, under Assets, click Proxies .
2 In the right pane, on the Proxies tab, click the SMTP proxy, and then click Properties .
3 In the Proxy Properties dialog box, on the Trace tab, check Enable tracing .
4 Click OK .
5
Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
6 When prompted to save your changes, click Yes .
Related information
None.
Setting the SMTP proxy to debug mode for more verbose error reporting
Using the procedure in this section, you can configure the SMTP proxy to recognize the debug
command. Enabling support for the debug command instructs the SMTP proxy to write additional
SMTP log messages into the log file for any SMTP-related connection. This feature is normally
implemented at the request of Technical Support to help diagnose SMTP issues.
Changes you make take affect immediately after saving and activating the configuration.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Configuring access for inbound and outbound email” on page 229
To set the SMTP proxy to debug mode for more verbose error reporting
1 In the SGMI, in the left pane, under Assets, click Proxies .
2 In the right pane, on the Proxies tab, click the SMTP proxy, and then click Properties .
3 In the Proxy Properties dialog box, on the Trace tab, check Enable SMTPD to recognize the debug
command .
4
Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
6
When prompted to save your changes, click Yes .