Event Logging - McAfee INTERNET SECURITY SUITE 2008 User Manual

106 McAfee Internet Security

Event Logging

Firewall allows you to enable or disable event logging and, when
enabled, which event types to log. Event logging allows you to
view recent inbound, outbound events and intrusion events.
Configure event log settings
You can specify and configure the types of Firewall events to log.
By default, event logging is enabled for all events and activities.
1
On the Internet & Network Configuration pane, under
Firewall protection is
2
On the Firewall pane, click
3
If it is not already selected, select
4
Under Enable Event
that you want or do not want to log. Event types include the
following:
Blocked Programs
ICMP Pings
Traffic from Banned IP Addresses
Events on System Service Ports
Events on Unknown Ports
Intrusion Detection (IDS) events
5
To prevent logging on specific ports, select
on the following
separated by commas, or port ranges with dashes. For
example, 137-139, 445, 400-5000.
6
Click OK.
View recent events
If logging is enabled, you can view recent events. The Recent
Events pane shows the date and description of the event. It
displays activity for programs that have been explicitly blocked
from accessing the Internet.
On the Advanced
click Reports & Logs
click View Recent Events
from the Basic Menu.
enabled, click Advanced.
Event Log Settings.
Enable Event
Logging, select or clear the event types
port(s), and then enter single port numbers
Menu, under the Common Tasks pane,
or View Recent Events. Alternatively,
under the Common Tasks pane
Logging.
Do not log events