Querying The Logs - NETGEAR STM150 Appliance Reference Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
• Querying and downloading logs
• Generating and downloading e-mail, Web, and system reports
• Scheduling automatic e-mail, Web, and system reports, and e-mailing these reports to
specified recipients.
For information about e-mailing logs and sending logs to a syslog server, see
Activating System, E-mail, and Syslog Logs" on page

Querying the Logs

The STM generates logs that provide detailed information about malware and traffic activities on
the network. You can search and view these logs through the Web Management Interface or save
the log records in CSV or HTML format and download them to a computer (the downloading
option is not available for all logs). You can also specify how many entries will be displayed per
page (the default setting is 15 entries).
The STM provides eight types of logs:
• Traffic. All scanned incoming and outgoing traffic.
• Virus. All intercepted viruses.
• Spyware. All intercepted spyware.
• Spam. All intercepted spam, including spam that was detected through the blacklist, real-time
blacklist, and Distributed Spam Analysis.
• Email filters. All e-mails that are intercepted because of keyword, file type, file name,
password, or size limit violations.
• Content filters. All Web sites, URLs, and FTP sites that are intercepted because of Web
category, blacklist, file type, or size limit violations.
• System. The system event logs that include all system errors, informational messages,
configuration changes, and system software updates.
• Application. All intercepted application access violations.
You can query and generate each type of log separately and filter the information based on a
number of criteria. For example, you can filter the virus logs using the following criteria (other log
types have similar filtering criteria):
• Start date and time
• End date and time
• Protocols (SMTP, POP3, IMAP, HTTP, FTP, HTTPS)
• Virus name
• Action (delete, quarantine, quarantine e-mail, block e-mail, and log)
6-22
6-3.
Monitoring System Access and Performance
v1.0, September 2009
"Configuring and