Traffic Logs; Virus Logs; Email Filter Logs - NETGEAR UTM9S Reference Manual

ProSecure Unified Threat Management (UTM) Appliance

Traffic Logs

This section describes logs that are generated when the UTM processes web and email
traffic.
Table 169. Content-filtering and security logs: traffic
Message
Explanation
Recommended Action

Virus Logs

This section describes logs that are generated when the UTM detects viruses.
Table 170. Content-filtering and security logs: virus
Message
Explanation
Recommended Action

Email Filter Logs

This section describes logs that are generated when the UTM filters email content.
Table 171. Content-filtering and security logs: email filter
Message
Explanation
Recommended Action
2009-02-28 23:59:59 HTTP 99 radius_domain radius_user1 192.168.1.2
192.168.33.8 xlzimap@test.com xlzpop3@test.com
[MALWARE INFECTED] Fw: cleanvirus
Web and email traffic logs for HTTP, SMTP, POP3, IMAP, HTTPS, and FTP traffic.
In this sample message, a malware threat was cleaned from the traffic. The
message shows the date and time, protocol, size of the web file or email, domain,
user, client IP address, server IP address, sender, recipient, and web URL or email
subject line.
None.
2008-02-29 23:59:00 POP3 OF97/Jerk Delete cleanvirus.zip radius_domain
radius_user1 192.168.1.2 192.168.35.166 xlzimap@test.com xlzimap@test.com
[MALWARE INFECTED] Fw: cleanvirus
Virus logs for all services. The message shows the date and time, protocol, virus
name, the action that is taken, file name, domain, user, client IP address, server IP
address, sender, recipient, and web URL or email subject line.
None.
2009-04-31 23:59:59 SMTP radius_domain radius_user1 192.168.1.2
192.168.35.165 xlzimap@test.com xlzpop3@test.com test Keyword test BlockMail
Logs that are generated when emails are blocked because of a keyword violation in
the subject line. The message shows the date and time, protocol, domain, user,
client IP address, server IP address, sender, recipient, email subject line, reason for
the action, details, and the action that is taken.
None.
System Logs and Error Messages
595