Symantec 10744983 - Mail Security 8320, Руководство администратора

Страница: 224 / 249

Table A-3
Settings for Administrative and Definition Update statistics
Value Setting
Admin and Definition Update stats Type:
/opt/Symantec/SMSSMTP/logs/tomcat/BMI_SESA/Brightmail_SESA_Events.2 Path for Linux/Solaris:
c:\Program
Files\Symantec\SMSSMTP\logs\tomcat\BMI_SESA\Brightmail_SESA_Events.2
Path for Windows:
Brightmail_SESA_Events Filename:
Dynamic Filename & Monitor in Real Time Configure as:
Firewall events that are sent to the Information Manager
Table A-4 describes the definition update events that Symantec Mail Security for
SMTP can send to the Information Manager.
Table A-4
Firewall events that are sent to the Information Manager
Rule description
(Reason sent)
Event class Severity Event ID
(SES_EVENT_<Unique ID>)
Connection Permitted symc_firewall_network Informational SES_EVENT_CONNECTION_ACCEPTED
(512000)
Connection Rejected symc_firewall_network Informational SES_DETAIL_CONNECTION_REJECTED
(517242)
Connection Deferred symc_firewall_network Informational SES_DETAIL_CONNECTION_REJECTED
(517247)
Definition Update events that are sent to the Information Manager
Table A-5 describes the definition update events that Symantec Mail Security for
SMTP can send to the Information Manager.
Table A-5
Definition Update events that are sent to the Information Manager
Rule Description
(Reason sent)
Event class Severity Event ID
(SES_EVENT_<Unique ID>)
Antivirus definition update symc_def_update Informational SES_EVENT_VIRUS_DEFINITION_UPDATE
(92004)
Integrating Symantec Mail Security with Symantec Security Information Manager
Interpreting events in the Information Manager
224