26
©
SOLIDA SYSTEMS INTERNATIONAL 2017
Figure 9.2 List of event files.
In this example, the file named rune14.log is the current active event log file. The remaining
files are files that have been rotated. The appended time stamp indicates the time at which the
event file was rotated.
9.2 Event Severity
Events are grouped into three categories depending on their severity, which are low, medium
and critical. Clicking on an event in the table will pop up a new window containing a further
explanation of the cause of the event.
9.2.1 Low severity (colored green in the GUI)
These events are typically generated by trying to visit known phishing sites, or sites containing
various types of malware. The appliance will automatically drop these network packets. This will
prevent malware from infecting the protected network.
These events require no further action from the user.
9.2.2 Medium severity (colored orange in the GUI)
Events with a medium severity rating include known C2 domains, domains with severe drive-by
malware, Trojans and more. Network packets destined to these domains will be automatically
dropped, in an effort to maintain network integrity.
These events require no further action from the user.