ZyXEL Communications Prestige 662HW Series, Руководство пользователя

Страница: 448 / 458

Prestige 662HW Series User’s Guide
H-2 Log Descriptions
Chart H-3 Content Filtering Logs
MESSAGE NOTE DESCRIPTION
(Destination)
Keyword Blocking
Web Block The Prestige blocked access to an address or domain name
that had a forbidden keyword.
(Destination)
Contains ActiveX
Web Block The Prestige blocked access to an IP address or domain
name that contains ActiveX because the content filter is set to
forbid ActiveX.
(Destination)
Contains Java
applet
Web Block The Prestige blocked access to an IP address or domain
name that contains a Java applet because the content filter is
set to forbid Java applets.
(Destination)
Contains cookie
Web Block The Prestige blocked access to an IP address or domain
name that contains a cookie because the content filter is set to
forbid cookies.
(Destination)
Proxy mode
detected
Web Block The Prestige blocked access to an IP address or domain
name that contains a proxy because the content filter is set to
forbid proxies.
(Destination) Web
Forward The Prestige allowed access to an address or domain name
when content filtering was turned off according to its schedule.
The attack logs may include the protocol (Protocol) of the packet (for example TCP or UDP) that
triggered the log.
Chart H-4 Attack Logs
LOG MESSAGE DESCRIPTION
attack (Protocol) The firewall detected an attack. The log may also display the protocol
(for example TCP or UDP).
land Protocol) The firewall detected a land attack. The log may also display the
protocol (for example TCP or UDP).
icmp echo ICMP
(type:%d, code:%d)
The firewall detected an ICMP echo attack. See the section on ICMP
messages for type and code details.
syn flood TCP The firewall detected a TCP syn flood attack.
ports scan TCP The firewall detected a TCP port scan attack.
teardrop (Protocol) The firewall detected a teardrop attack.
illegal command TCP The firewall detected a TCP SMTP illegal command attack.
NetBIOS TCP The firewall detected a TCP NetBIOS attack.
ip spoofing - no
routing entry
(Protocol)
The firewall detected an IP spoofing attack while the Prestige did not
have a default route. The log may also display the protocol (for
example TCP or UDP).
vulnerability ICMP
(type:%d, code:%d)
The firewall detected an ICMP vulnerability attack; see the section on
ICMP messages for type and code details.
traceroute ICMP
(type:%d, code:%d)
The firewall detected an ICMP traceroute attack; see the
section on ICMP messages for type and code details.
Access logs may include the following information: